Known vulnerabilities in OpenShift Service Mesh

Software CPE: cpe:2.3:a:red_hat:openshift_service_mesh:*:*:*:*:*:*:*:*
Total vulnerabilities: 273
Public exploits: 17
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Service Mesh OpenShift Service Mesh is affected by 273 known vulnerabilities: 47 high, 157 medium, 69 low Critical High Medium Low

Vulnerabilities (273)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118190 - Resource exhaustion
CVE-2025-58183
CWE-400 Medium
No
No
2.6.12 07.11.2025 SB2025110705
SB2025110725
SB2025110726
and 177 more
#VU113069 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-53643
CWE-444 Medium
No
No
3.0.7, 3.1.4 18.07.2025 SB2025071857
SB2025090377
SB2025091303
and 15 more
#VU104099 - Use After Free
CVE-2024-56171
CWE-416 High
No
No
2.5.10 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU104098 - Stack-based buffer overflow
CVE-2025-24928
CWE-121 High
No
No
2.5.10 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU103932 - Missing release of memory after effective lifetime
CVE-2025-22866
CWE-401 Low
No
No
2.5.10 12.02.2025 SB20250212100
SB20250212101
SB20250212102
and 27 more
#VU103504 - Out-of-bounds write
CVE-2025-24528
CWE-787 Medium
No
No
2.5.10 03.02.2025 SB2025020331
SB2025020352
SB2025020412
and 49 more
#VU103455 - Exposure of sensitive information to an unauthorized actor
CVE-2024-45336
CWE-200 Low
No
No
2.5.10 30.01.2025 SB2025013039
SB2025013043
SB2025013044
and 38 more
#VU103422 - Resource exhaustion
CVE-2025-21614
CWE-400 Low
No
No
2.4.14, 2.5.8, 2.6.5 29.01.2025 SB2025012918
SB2025012919
SB2025012920
and 20 more
#VU103421 - Argument Injection or Modification
CVE-2025-21613
CWE-88 Low
No
No
2.4.14, 2.5.8, 2.6.5 29.01.2025 SB2025012918
SB2025012919
SB2025012920
and 27 more
#VU102730 - Use of Uninitialized Variable
CVE-2024-12085
CWE-457 Medium
No
No
2.5.8, 2.6.5 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 92 more
#VU102463 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-55565
CWE-835 Medium
No
No
2.5.8 08.01.2025 SB2025010849
SB2025010851
SB2025010853
and 45 more
#VU101972 - Security Features
CVE-2024-56326
CWE-254 Low
No
No
2.6.5 27.12.2024 SB2024122789
SB2024122790
SB2024122791
and 78 more
#VU101895 - Inefficient Regular Expression Complexity
CVE-2024-52798
CWE-1333 Low
No
No
2.5.8 23.12.2024 SB2024122305
SB2024122309
SB2025011306
and 45 more
#VU101868 - Resource exhaustion
CVE-2024-45338
CWE-400 Medium
No
No
2.4.14, 2.5.8, 2.6.5 19.12.2024 SB2024121932
SB2024123101
SB2025010619
and 137 more
#VU101847 - NULL Pointer Dereference
CVE-2024-53270
CWE-476 Medium
No
No
2.6.5 19.12.2024 SB2024121911
SB2024121913
SB2025020519
#VU100921 - Incorrect Regular Expression
CVE-2024-21538
CWE-185 Medium
No
No
2.4.13, 2.5.7 26.11.2024 SB2024112627
SB2024112629
SB2024120325
and 67 more
#VU100516 - Improper input validation
CVE-2024-11168
CWE-20 Medium
No
No
2.4.14, 2.5.8, 2.6.5 15.11.2024 SB2024111507
SB2024111526
SB2024111527
and 76 more
#VU99357 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-9287
CWE-78 Low
No
No
2.4.14, 2.5.8, 2.6.5 28.10.2024 SB2024102836
SB2024102838
SB20241101111
and 117 more
#VU90156 - Security Features
CVE-2024-35195
CWE-254 Low
No
No
2.4.14, 2.5.8, 2.6.5 31.05.2024 SB2024053174
SB2024053188
SB2024053192
and 117 more
#VU81307 - Improper input validation
CVE-2023-44270
CWE-20 Low
No
No
2.5.7 02.10.2023 SB2023100210
SB2023111710
SB2023112080
and 28 more


Showing elements 1 - 20 out of 273