Known vulnerabilities in OpenShift Service Mesh - page 5

Software CPE: cpe:2.3:a:red_hat:openshift_service_mesh:*:*:*:*:*:*:*:*
Total vulnerabilities: 273
Public exploits: 17
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Service Mesh OpenShift Service Mesh is affected by 273 known vulnerabilities: 47 high, 157 medium, 69 low Critical High Medium Low

Vulnerabilities (273)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89712 - Stack-based buffer overflow
CVE-2024-33599
CWE-121 High
No
No
2.4.8, 2.5.2 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 84 more
#VU89711 - NULL Pointer Dereference
CVE-2024-33600
CWE-476 Medium
No
No
2.4.8, 2.5.2 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 83 more
#VU89710 - Allocation of Resources Without Limits or Throttling
CVE-2024-33601
CWE-770 Low
No
No
2.4.8, 2.5.2 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 82 more
#VU89709 - Memory corruption
CVE-2024-33602
CWE-119 Medium
No
No
2.4.8, 2.5.2 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 91 more
#VU88822 - Memory corruption
CVE-2024-2961
CWE-119 High
Available
Exploited
2.4.8, 2.5.2 18.04.2024 SB2024041855
SB2024041856
SB2024041857
and 107 more
#VU88226 - Missing release of memory after effective lifetime
CVE-2024-26461
CWE-401 Medium
No
No
2.4.8, 2.5.2 09.04.2024 SB2024040939
SB2024040943
SB20240611102
and 46 more
#VU88225 - Missing release of memory after effective lifetime
CVE-2024-26458
CWE-401 Medium
No
No
2.4.8, 2.5.2 09.04.2024 SB2024040938
SB2024040943
SB20240611102
and 47 more
#VU87845 - Improper Authorization
CVE-2024-1313
CWE-285 Medium
No
No
2.4.8, 2.5.2 27.03.2024 SB2024032711
SB2024043089
SB2024050720
and 10 more
#VU87830 - Missing release of memory after effective lifetime
CVE-2024-1394
CWE-401 Medium
No
No
2.4.8, 2.5.1, 2.5.2 26.03.2024 SB2024032646
SB2024032647
SB2024032648
and 54 more
#VU87749 - Missing Authorization
CVE-2024-1488
CWE-862 Low
No
No
2.5.1 22.03.2024 SB2024021506
SB2024032281
SB2024041058
and 28 more
#VU87685 - Resource exhaustion
CVE-2024-0450
CWE-400 Medium
No
No
2.4.8, 2.5.2 21.03.2024 SB2024032107
SB2024032110
SB2024040848
and 80 more
#VU87672 - Improper input validation
CVE-2024-28835
CWE-20 Medium
No
No
2.4.8, 2.5.2 20.03.2024 SB2024032057
SB2024032058
SB2024032059
and 71 more
#VU87671 - Cryptographic Issues
CVE-2024-28834
CWE-310 Medium
No
No
2.4.8, 2.5.1, 2.5.2 20.03.2024 SB2024032057
SB2024032058
SB2024032059
and 111 more
#VU87164 - Resource Management Errors
CVE-2024-1048
CWE-399 Low
No
No
2.5.2 06.03.2024 SB2024030663
SB2024030664
SB2024043039
and 7 more
#VU86052 - Use After Free
CVE-2024-25062
CWE-416 High
No
No
2.4.8, 2.5.2 05.02.2024 SB2024020507
SB2024020508
SB2024020742
and 115 more
#VU85808 - NULL Pointer Dereference
CVE-2024-0727
CWE-476 Medium
No
No
2.4.8, 2.5.2 25.01.2024 SB2024012552
SB2024020525
SB2024021323
and 100 more
#VU85623 - Information Exposure Through Timing Discrepancy
CVE-2024-0553
CWE-208 Medium
No
No
2.5.1 21.01.2024 SB2024012105
SB2024012106
SB2024012234
and 78 more
#VU85552 - Resource exhaustion
CVE-2024-22365
CWE-400 Low
No
No
2.4.8, 2.5.2 17.01.2024 SB2024011799
SB20240117126
SB2024011839
and 44 more
#VU85368 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-22195
CWE-79 Medium
No
No
2.5.2 15.01.2024 SB2024011508
SB2024011512
SB2024011513
and 60 more
#VU76238 - Expected Behavior Violation
CVE-2023-28322
CWE-440 Medium
No
No
2.5.1 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 88 more


Showing elements 81 - 100 out of 273