Known vulnerabilities in openshift-kuryr (Red Hat package) - page 7
Vendor:
Red Hat Inc.
Software:
openshift-kuryr (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:openshift-kuryr_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
198
Public exploits:
15
Known exploited (KEV):
2
Breakdown by Severity Chart
4.12.0-202610242309.p2.g8fd2f8b.assembly.stream.el8
4.13.0-202609251156.p2.g36754b7.assembly.stream.el8
4.13.0-202501071752.p0.g36754b7.assembly.stream.el8
4.12.0-202501071748.p0.g8fd2f8b.assembly.stream.el8
4.14.0-202410181711.p0.g8926a29.assembly.stream.el8
4.12.0-202410181935.p0.g8fd2f8b.assembly.stream.el8
4.13.0-202410181847.p0.g36754b7.assembly.stream.el8
4.13.0-202404151710.p0.g36754b7.assembly.stream.el8
4.14.0-202404151639.p0.g8926a29.assembly.stream.el8
4.12.0-202404161006.p0.g8fd2f8b.assembly.stream.el8
4.13.0-202403201503.p0.g36754b7.assembly.stream.el8
4.14.0-202403201503.p0.g8926a29.assembly.stream.el8
4.12.0-202403201504.p0.g8fd2f8b.assembly.stream.el8
4.14.0-202309272140.p0.g8926a29.assembly.stream.el8
4.13.0-202307191602.p0.g36754b7.assembly.stream.el8
4.13.0-202306281017.p0.g5baee73.assembly.stream.el8
4.12.0-202306230041.p0.g31dd228.assembly.stream.el8
4.10.0-202306170106.p0.g8e4df8b.assembly.stream.el8
4.11.0-202306280915.p0.gc732699.assembly.stream.el8
4.12.0-202306140156.p0.g31dd228.assembly.stream.el8
4.13.0-202305171615.p0.g3055dbe.assembly.stream.el8
4.10.0-202305161315.p0.g8e4df8b.assembly.stream.el8
4.13.0-202304192042.p0.g4fe6bbc.assembly.stream.el8
4.11.0-202304070715.p0.g93daed6.assembly.stream.el8
4.11.0-202303240327.p0.g93daed6.assembly.stream.el8
4.10.0-202302072053.p0.gd4f4d9a.assembly.stream.el8
4.8.0-202110140215.p0.git.15fa4c4.assembly.stream.el8
4.6.0-202107300032.p0.git.0063daa.el8
4.8.0-202107291413.p0.git.8a4c2d8.assembly.stream.el8
4.7.0-202103241948.p0.git.2504.add19d0.el8
3.11.394-1.git.1490.16ed375.el7
4.7.0-202101262230.p0.git.2494.cd95ce5.el8
3.11.374-1.git.1478.ef11824.el7
4.5.0-202012221738.p0.git.2004.e3caa5a.el8
4.6.0-202010011649.p0.git.2200.e296ba5.el8
4.3.40-202010141211.p0.git.1641.ff17cdb.el8
4.3.28-202006270952.p0.git.1632.9e3ea83.el8
4.4.0-202006271254.p0.git.1811.c15bfa2.el8
3.11.232-1.git.1.d2cedd4.el7
4.3.0-201911060517.git.1.eea1453.el7
4.3.0-202001152300.git.1.a051bf1.el8
4.12.0-202210261235.p0.g92b9be2.assembly.stream.el8
4.11.0-202211072116.p0.g93daed6.assembly.stream.el8
4.11.0-202208101627.p0.g6952743.assembly.stream.el8
4.11.0-202206232036.p0.g66c0cec.assembly.stream.el8
4.10.0-202207192015.p0.ge96efa4.assembly.stream.el8
3.11.715-1.g0c4bf66.el7
3.11.705-1.g0c4bf66.el7
3.11.685-1.g0c4bf66.el7
4.6.0-202202251050.p0.g74cd766.assembly.stream.el8
4.10.0-202202160023.p0.ge77f917.assembly.stream.el8
4.6.0-202201261116.p0.g74cd766.assembly.stream.el8
3.11.634-1.g0c4bf66.el7
4.6.0-202105061806.p0.git.74e6cd2.el8
4.7.0-202201082234.p0.g72de60e.assembly.stream.el8
4.8.0-202112131630.p0.g839864c.assembly.stream.el8
4.6.0-202111041131.p0.git.7c5a4f7.assembly.stream.el8
3.11.569-1.g0c4bf66.el7
4.8.0-202111221627.p0.g43dd2f6.assembly.stream.el8
4.9.0-202111221622.p0.g473fd0c.assembly.stream.el8
4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8
3.11.542-1.git.707a557.el7
4.9.0-202109101042.p0.git.e66f211.assembly.stream.el8
3.11.524-1.git.b234b49.el7
4.6.0-202108202025.p0.git.0063daa.assembly.stream.el8
4.7.0-202107291238.p0.git.c7654fb.assembly.stream.el8
3.11.501-1.git.c33a657.el7
4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
4.7.0-202107070256.p0.git.c7654fb.assembly.stream.el8
4.7.0-202106232224.p0.git.c7654fb.el8
4.5.0-202106011407.p0.git.75cc301.el8
3.11.462-1.git.c33a657.el7
4.6.0-202106181055.p0.git.7feb5bd.el8
3.11.452-1.git.c33a657.el7
4.7.0-202105140104.p0.git.8b61936.el8
3.11.420-1.git.1500.afe0076.el7
4.7.0-202105111743.p0.git.36c2cdd.el8
4.7.0-202104250659.p0.git.d49acc4.el8
4.6.0-202103192141.p0.git.2234.cba9525.el8
4.7.0-202103171728.p0.git.2502.8383c08.el8
3.11.404-1.git.1494.91fb403.el7
4.5.0-202012022006.p0.git.2002.19b85d0.el8
4.6.0-202102031810.p0.git.2225.a3ab872.el8
4.4.0-202101082241.p0.git.1821.1a159eb.el8
4.6.0-202101151835.p0.git.2220.40847e5.el8
4.6.0-202012171504.p0.git.2216.1fecf92.el8
3.11.346-1.git.1478.b99caab.el7
4.6.0-202012042155.p0.git.2216.8a6f6a5.el8
4.5.0-202010091010.p0.git.1998.b73d461.el8
3.11.248-1.git.1.f90c804.el7
3.11.161-1.git.1.33697e5.el7
4.3.10-202003300855.git.0.07e6ba6.el8
4.3.25-202006081518.git.1.240b401.el8
4.4.0-202008131757.p0.git.1813.8e0365d.el8
4.2.4-201911042119.git.1.d838b90.el7
4.2.0-201910101431.git.1.e63e8cd.el7
3.11.153-1.git.1.073ef06.el7
4.4.0-202006080017.git.1.855ef1d.el8
3.11.219-1.git.1.717d59f.el7
4.3.1-202002031701.git.1.cfa4a05.el8
4.3.9-202003230116.git.0.9f1e22e.el8
4.2.20-202002140432.git.1.d9a72a5.el7
4.3.3-202002170501.git.1.3b8b4cc.el8
3.11.170-1.git.1.7265da1.el7
4.3.5-202003020117.git.0.237579a.el8
Vulnerabilities (198)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU61439 - Improper Control of Generation of Code ('Code Injection') CVE-2022-0811 |
CWE-94 | Medium | 4.6.0-202202251050.p0.g74cd766.assembly.stream.el8 | 17.03.2022 |
SB2022031714 SB2022031723 SB2022032225 and 12 more |
||
| #VU60644 - Exposure of sensitive information to an unauthorized actor CVE-2022-25184 |
CWE-200 | Low | 3.11.685-1.g0c4bf66.el7 | 16.02.2022 |
SB2022021609 SB2022032826 SB2022032910 and 4 more |
||
| #VU60642 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-25175 |
CWE-78 | Medium | 3.11.685-1.g0c4bf66.el7 | 16.02.2022 |
SB2022021608 SB2022032826 SB2022032910 and 4 more |
||
| #VU60641 - Improper Control of Generation of Code ('Code Injection') CVE-2022-25183 |
CWE-94 | Medium | 3.11.685-1.g0c4bf66.el7 | 16.02.2022 |
SB2022021607 SB2022032826 SB2022032910 and 4 more |
||
| #VU60639 - Improper Control of Generation of Code ('Code Injection') CVE-2022-25181 |
CWE-94 | Medium | 3.11.685-1.g0c4bf66.el7 | 16.02.2022 |
SB2022021607 SB2022032826 SB2022032910 and 4 more |
||
| #VU60638 - UNIX Symbolic Link (Symlink) Following CVE-2022-25178 |
CWE-61 | Medium | 3.11.685-1.g0c4bf66.el7 | 16.02.2022 |
SB2022021607 SB2022032826 SB2022032910 and 4 more |
||
| #VU60637 - UNIX Symbolic Link (Symlink) Following CVE-2022-25177 |
CWE-61 | Medium | 3.11.685-1.g0c4bf66.el7 | 16.02.2022 |
SB2022021607 SB2022032826 SB2022032910 and 4 more |
||
| #VU60636 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-25174 |
CWE-78 | Medium | 3.11.685-1.g0c4bf66.el7 | 16.02.2022 |
SB2022021607 SB2022032826 SB2022032910 and 4 more |
||
| #VU60635 - Exposure of sensitive information to an unauthorized actor CVE-2022-25180 |
CWE-200 | Low | 3.11.685-1.g0c4bf66.el7 | 16.02.2022 |
SB2022021606 SB2022032826 SB2022032910 and 4 more |
||
| #VU60634 - UNIX Symbolic Link (Symlink) Following CVE-2022-25176 |
CWE-61 | Medium | 3.11.685-1.g0c4bf66.el7 | 16.02.2022 |
SB2022021606 SB2022032826 SB2022032910 and 4 more |
||
| #VU60633 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-25173 |
CWE-78 | Medium | 3.11.685-1.g0c4bf66.el7 | 16.02.2022 |
SB2022021606 SB2022032826 SB2022032910 and 4 more |
||
| #VU60527 - Resource exhaustion CVE-2021-43859 |
CWE-400 | Medium | 3.11.685-1.g0c4bf66.el7 | 11.02.2022 |
SB2022021102 SB2022021103 SB2022042250 and 26 more |
||
| #VU59583 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-20617 |
CWE-78 | Medium | 3.11.634-1.g0c4bf66.el7, 4.6.0-202201261116.p0.g74cd766.assembly.stream.el8 | 13.01.2022 |
SB2022011311 SB2022021019 SB2022021637 and 5 more |
||
| #VU59576 - Cross-Site Request Forgery (CSRF) CVE-2022-20612 |
CWE-352 | Low | 3.11.634-1.g0c4bf66.el7, 4.6.0-202201261116.p0.g74cd766.assembly.stream.el8 | 13.01.2022 |
SB2022011305 SB2022021019 SB2022021637 and 6 more |
||
| #VU57979 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-21686 |
CWE-22 | Medium | 3.11.569-1.g0c4bf66.el7, 4.6.0-202111041131.p0.git.7c5a4f7.assembly.stream.el8, 4.8.0-202111221627.p0.g43dd2f6.assembly.stream.el8, 4.9.0-202111221622.p0.g473fd0c.assembly.stream.el8 | 08.11.2021 |
SB2021110805 SB2021110806 SB2021112915 and 4 more |
||
| #VU57978 - Missing Authorization CVE-2021-21685 |
CWE-862 | High | 3.11.569-1.g0c4bf66.el7, 4.6.0-202111041131.p0.git.7c5a4f7.assembly.stream.el8, 4.8.0-202111221627.p0.g43dd2f6.assembly.stream.el8, 4.9.0-202111221622.p0.g473fd0c.assembly.stream.el8 | 08.11.2021 |
SB2021110805 SB2021110806 SB2021112915 and 4 more |
||
| #VU56401 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2021-40346 |
CWE-444 | Medium | 4.7.0-202201082234.p0.g72de60e.assembly.stream.el8, 4.8.0-202112131630.p0.g839864c.assembly.stream.el8, 4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8 | 08.09.2021 |
SB2021090813 SB2021090814 SB2021111101 and 11 more |
||
| #VU55971 - Improper input validation CVE-2021-39242 |
CWE-20 | Medium | 4.8.0-202112131630.p0.g839864c.assembly.stream.el8, 4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8 | 18.08.2021 |
SB2021081816 SB2021081819 SB2021111101 and 4 more |
||
| #VU55970 - Improper input validation CVE-2021-39241 |
CWE-20 | Medium | 4.7.0-202201082234.p0.g72de60e.assembly.stream.el8, 4.8.0-202112131630.p0.g839864c.assembly.stream.el8, 4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8 | 18.08.2021 |
SB2021081816 SB2021081819 SB2021111101 and 7 more |
||
| #VU55969 - Improper input validation CVE-2021-39240 |
CWE-20 | Medium | 4.8.0-202112131630.p0.g839864c.assembly.stream.el8, 4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8 | 18.08.2021 |
SB2021081816 SB2021081819 SB2021111101 and 4 more |
Showing elements 121 - 140 out of 198