Known vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) - page 13

Vendor: Red Hat Inc.
Software: OpenShift Data Foundation (formerly OpenShift Container Storage)
Software CPE: cpe:2.3:a:red_hat:openshift_container_storage:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 476
Public exploits: 35
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Data Foundation (formerly OpenShift Container Storage) OpenShift Data Foundation (formerly OpenShift Container Storage) is affected by 476 known vulnerabilities: 1 critical, 90 high, 246 medium, 139 low Critical High Medium Low

Vulnerabilities (476)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72887 - Resource exhaustion
CVE-2022-45873		 CWE-400 Low
No
No
 4.13.0 06.03.2023 SB2023030658
SB2023030659
SB2023030716
and 7 more
#VU72575 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-48339		 CWE-78 High
No
No
 4.13.0 26.02.2023 SB2022120142
SB2023022605
SB2023030230
and 50 more
#VU72574 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-48338		 CWE-78 Low
No
No
 4.13.0 26.02.2023 SB2022120142
SB2023022605
SB2023030230
and 14 more
#VU72573 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-48337		 CWE-78 High
No
No
 4.13.0 26.02.2023 SB2022120142
SB2023022605
SB2023030230
and 42 more
#VU72432 - Heap-based Buffer Overflow
CVE-2022-48303		 CWE-122 High
No
No
 4.11.7, 4.12.2, 4.13.0 21.02.2023 SB2023022105
SB2023022111
SB2023022112
and 72 more
#VU72125 - Inadequate Encryption Strength
CVE-2023-0361		 CWE-326 Medium
No
No
 4.11.7, 4.12.3, 4.13.0 11.02.2023 SB2023021103
SB2023021109
SB2023021561
and 88 more
#VU71771 - Double Free
CVE-2023-25136		 CWE-415 High
Available
No
 4.13.0 02.02.2023 SB2023020247
SB2023020304
SB2023021660
and 11 more
#VU71559 - NULL Pointer Dereference
CVE-2022-47024		 CWE-476 Low
No
No
 4.13.0 26.01.2023 SB2023012623
SB2023013121
SB2023022848
and 16 more
#VU71529 - Resource exhaustion
CVE-2022-3094		 CWE-400 Medium
No
No
 4.13.0 25.01.2023 SB2023012556
SB2023012559
SB2023012602
and 47 more
#VU71332 - Improper input validation
CVE-2023-22809		 CWE-20 Low
Available
No
 4.13.0 18.01.2023 SB20230118100
SB20230118104
SB20230118105
and 55 more
#VU70474 - Integer overflow
CVE-2022-47629		 CWE-190 High
No
No
 4.12.1, 4.13.0 22.12.2022 SB2022122202
SB2022122204
SB2022122205
and 98 more
#VU69392 - Resource exhaustion
CVE-2022-45061		 CWE-400 Medium
No
No
 4.11.7, 4.12.1, 4.12.2, 4.13.0 16.11.2022 SB2022111650
SB2022112824
SB2022112856
and 125 more
#VU68829 - Resource Management Errors
CVE-2022-40304		 CWE-399 Medium
No
No
 4.13.0 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 90 more
#VU68828 - Integer overflow
CVE-2022-40303		 CWE-190 High
No
No
 4.13.0 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 88 more
#VU68718 - Use After Free
CVE-2022-43680		 CWE-416 Medium
No
No
 4.13.0 25.10.2022 SB2022102560
SB2022102566
SB2022103010
and 99 more
#VU68116 - Inadequate Encryption Strength
CVE-2022-3358		 CWE-326 Medium
Available
No
 4.13.0 11.10.2022 SB2022101132
SB2022110133
SB2022110144
and 12 more
#VU66813 - NULL Pointer Dereference
CVE-2022-2309		 CWE-476 Medium
No
No
 4.13.0 29.08.2022 SB2022082928
SB2022082929
SB2022082930
and 28 more
#VU66153 - Heap-based Buffer Overflow
CVE-2022-37434		 CWE-122 High
Available
No
 4.13.0 07.08.2022 SB2022080705
SB2022081833
SB2022081851
and 154 more
#VU65915 - Double Free
CVE-2022-2509		 CWE-415 High
No
No
 4.13.0 02.08.2022 SB2022080207
SB2022080208
SB2022080509
and 54 more
#VU63945 - Out-of-bounds read
CVE-2022-1586		 CWE-125 Medium
No
No
 4.11.0, 4.13.0 02.06.2022 SB2022060210
SB2022071156
SB2022071217
and 71 more


Showing elements 241 - 260 out of 476