Known vulnerabilities in openshift4-aws-iso (Red Hat package)

Vendor: Red Hat Inc.

Software: openshift4-aws-iso (Red Hat package)

Software CPE: cpe:2.3:o:red_hat:openshift4-aws-iso_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 63

Public exploits: 2

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (63)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU111945 - Improper Certificate Validation CVE-2025-6032	CWE-295	Medium	No	No	4.17.0-202507011904.p0.gd2acdd5.assembly.stream.el8	25.06.2025	SB2025062534 SB2025062541 SB2025062542 and 26 more
#VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2025-22871	CWE-444	Medium	No	No	4.15.0-202507041136.p0.gd2acdd5.assembly.stream.el8, 4.16.0-202507050035.p0.gd2acdd5.assembly.stream.el8, 4.17.0-202507011904.p0.gd2acdd5.assembly.stream.el8, 4.18.0-202507011252.p0.gd2acdd5.assembly.stream.el8, 4.19.0-202506111249.p0.gd2acdd5.assembly.stream.el8	05.04.2025	SB2025040507 SB2025040508 SB2025040739 and 109 more
#VU98828 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-9675	CWE-22	Low	No	No	4.13.0-202410181847.p0.gd2acdd5.assembly.stream.el8, 4.14.0-202410181711.p0.gd2acdd5.assembly.stream.el8	21.10.2024	SB2024102103 SB2024102104 SB2024102107 and 51 more
#VU98817 - UNIX Symbolic Link (Symlink) Following CVE-2024-9676	CWE-61	Low	No	No	4.12.0-202410181935.p0.gd2acdd5.assembly.stream.el8, 4.13.0-202410181847.p0.gd2acdd5.assembly.stream.el8, 4.14.0-202410181711.p0.gd2acdd5.assembly.stream.el8, 4.15.0-202410181710.p0.gd2acdd5.assembly.stream.el8	18.10.2024	SB2024101822 SB2024101823 SB2024101824 and 54 more
#VU98141 - Improper input validation CVE-2024-9341	CWE-20	Low	No	No	4.12.0-202410181935.p0.gd2acdd5.assembly.stream.el8, 4.13.0-202410181847.p0.gd2acdd5.assembly.stream.el8, 4.15.0-202410181710.p0.gd2acdd5.assembly.stream.el8, 4.16.0-202410172045.p0.gd2acdd5.assembly.stream.el8	08.10.2024	SB2024100842 SB2024100843 SB2024100848 and 44 more
#VU97965 - Improper Access Control CVE-2024-44082	CWE-284	Low	No	No	4.12.0-202410181935.p0.gd2acdd5.assembly.stream.el8	02.10.2024	SB2024100260 SB2024100261 SB2024100262 and 10 more
#VU97217 - Resource exhaustion CVE-2024-34158	CWE-400	Medium	No	No	4.12.0-202410181935.p0.gd2acdd5.assembly.stream.el8, 4.13.0-202410181847.p0.gd2acdd5.assembly.stream.el8, 4.14.0-202410181711.p0.gd2acdd5.assembly.stream.el8, 4.15.0-202410181710.p0.gd2acdd5.assembly.stream.el8, 4.16.0-202410172045.p0.gd2acdd5.assembly.stream.el8, 4.17.0-202410111511.p0.gd2acdd5.assembly.stream.el8	12.09.2024	SB2024091261 SB2024091264 SB2024091265 and 76 more
#VU97216 - Resource exhaustion CVE-2024-34156	CWE-400	Medium	No	No	4.12.0-202410181935.p0.gd2acdd5.assembly.stream.el8, 4.13.0-202410181847.p0.gd2acdd5.assembly.stream.el8, 4.14.0-202410181711.p0.gd2acdd5.assembly.stream.el8, 4.15.0-202410181710.p0.gd2acdd5.assembly.stream.el8, 4.16.0-202410172045.p0.gd2acdd5.assembly.stream.el8, 4.17.0-202410111511.p0.gd2acdd5.assembly.stream.el8	12.09.2024	SB2024091261 SB2024091264 SB2024091265 and 143 more
#VU97215 - Resource exhaustion CVE-2024-34155	CWE-400	Medium	No	No	4.12.0-202410181935.p0.gd2acdd5.assembly.stream.el8, 4.13.0-202410181847.p0.gd2acdd5.assembly.stream.el8, 4.14.0-202410181711.p0.gd2acdd5.assembly.stream.el8, 4.15.0-202410181710.p0.gd2acdd5.assembly.stream.el8, 4.16.0-202410172045.p0.gd2acdd5.assembly.stream.el8, 4.17.0-202410111511.p0.gd2acdd5.assembly.stream.el8	12.09.2024	SB2024091261 SB2024091264 SB2024091265 and 81 more
#VU94792 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2024-5569	CWE-835	Medium	No	No	4.17.0-202410111511.p0.gd2acdd5.assembly.stream.el8	26.07.2024	SB2024072688 SB2024072690 SB2024072692 and 59 more
#VU94616 - Information Exposure Through Log Files CVE-2024-6104	CWE-532	Low	No	No	4.17.0-202404161335.p0.gd2acdd5.assembly.stream.el8	19.07.2024	SB2024071927 SB2024071929 SB2024071930 and 83 more
#VU91159 - Improper input validation CVE-2024-24789	CWE-20	Low	No	No	4.17.0-202404161335.p0.gd2acdd5.assembly.stream.el8	05.06.2024	SB2024060520 SB2024060635 SB2024060729 and 78 more
#VU89685 - Improper Validation of Integrity Check Value CVE-2024-3727	CWE-354	Medium	No	No	4.16.0-202404181812.p0.gd2acdd5.assembly.stream.el8	21.05.2024	SB2024052112 SB2024052116 SB2024052117 and 68 more
#VU87329 - Resource exhaustion CVE-2024-28176	CWE-400	Medium	No	No	4.16.0-202404181812.p0.gd2acdd5.assembly.stream.el8	11.03.2024	SB2024031123 SB2024031446 SB2024031447 and 37 more
#VU87201 - Improper input validation CVE-2024-24784	CWE-20	Medium	No	No	4.16.0-202404181812.p0.gd2acdd5.assembly.stream.el8	07.03.2024	SB2024030734 SB2024030750 SB2024030752 and 48 more
#VU87200 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-24785	CWE-79	Low	No	No	4.16.0-202404181812.p0.gd2acdd5.assembly.stream.el8	07.03.2024	SB2024030734 SB2024030750 SB2024030752 and 61 more
#VU87198 - Exposure of sensitive information to an unauthorized actor CVE-2023-45289	CWE-200	Low	No	No	4.16.0-202404181812.p0.gd2acdd5.assembly.stream.el8	07.03.2024	SB2024030734 SB2024030750 SB2024030752 and 54 more
#VU87197 - Resource exhaustion CVE-2023-45290	CWE-400	Medium	No	No	4.16.0-202404181812.p0.gd2acdd5.assembly.stream.el8	07.03.2024	SB2024030734 SB2024030750 SB2024030752 and 101 more
#VU87196 - Error Handling CVE-2024-24783	CWE-388	Medium	No	No	4.16.0-202404181812.p0.gd2acdd5.assembly.stream.el8	07.03.2024	SB2024030734 SB2024030750 SB2024030752 and 81 more
#VU86795 - Improper input validation CVE-2023-29483	CWE-20	Medium	No	No	4.16.0-202404181812.p0.gd2acdd5.assembly.stream.el8	26.02.2024	SB2024022638 SB2024040115 SB2024042448 and 37 more

Showing elements 1 - 20 out of 63

Known vulnerabilities in openshift4-aws-iso (Red Hat package)

Breakdown by Severity Chart

Vulnerabilities (63)

Please verify you're human