Known vulnerabilities in openstack-ironic-python-agent (Red Hat package) - page 2
Vendor:
Red Hat Inc.
Software CPE:
cpe:2.3:o:red_hat:openstack-ironic-python-agent_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
62
Public exploits:
3
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
7.1.1-17.1.20260803104219.0211fa9.el9ost
9.0.1-0.20240913135525.2b2dd8f.el9
9.3.1-0.20240911165036.dfceb59.el9
9.6.1-0.20240103100525.3197b9d.el9
9.2.0-0.20221128164006.a167075.el9
6.4.4-0.20210811101217.48ffbaa.el8
6.4.3-0.20201217171210.bd45db1.el8
5.0.1-0.20191125202513.9681fd7.el8ost
6.3.1-0.20200918042952.9dd968f.el8ost
9.0.1-0.20220818145522.ad1eb41.el9
8.6.1-0.20220623075054.1d50c23.el8
8.1.1-0.20220623092113.0849a1b.el8
8.3.1-0.20220606104811.3c9b113.el8
8.3.1-0.20220105174059.d2d3cd6.el8
8.1.1-0.20210722155129.7f3de67.el8
7.0.2-0.20210611153100.bfa97cb.el8
6.4.4-0.20210310142329.99b9953.el8
5.0.1-0.20200123140814.025b790.el8ost
3.2.4-1.el7
3.2.3-1.el7
3.2.2-4.el7
3.2.2-3.el7
3.2.2-2.el7
3.2.2-1.el7
3.2.1-4.el7
3.2.1-3.el7
3.2.1-2.el7
2.2.3-1.el7
2.2.2-3.el7
2.0.1-3.el7
2.0.1-2.el7
2.0.0-2.el7
2.0.0-1.el7
1.5.2-6.el7
1.5.2-3.el7
1.5.2-2.el7
1.5.1-3.el7
1.5.1-1.el7
1.5.0-4.el7
1.2.2-3.el7
1.1.0-10.el7
1.1.0-8.el7
Vulnerabilities (62)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU72686 - Resource exhaustion CVE-2022-41723 |
CWE-400 | Medium | 9.2.0-0.20221128164006.a167075.el9 | 01.03.2023 |
SB2023030130 SB2023030131 SB2023030946 and 190 more |
||
| #VU72685 - Resource Management Errors CVE-2022-41724 |
CWE-399 | Medium | 9.2.0-0.20221128164006.a167075.el9 | 01.03.2023 |
SB2023030130 SB2023030131 SB2023030211 and 87 more |
||
| #VU72339 - Resource exhaustion CVE-2023-25577 |
CWE-400 | Medium | 9.2.0-0.20221128164006.a167075.el9 | 16.02.2023 |
SB2023021673 SB2023022875 SB2023031332 and 49 more |
||
| #VU72334 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-25725 |
CWE-444 | Medium | 9.2.0-0.20221128164006.a167075.el9 | 16.02.2023 |
SB2023021659 SB2023021662 SB2023021663 and 22 more |
||
| #VU71362 - Protection Mechanism Failure CVE-2022-3259 |
CWE-693 | Low | 9.2.0-0.20221128164006.a167075.el9 | 19.01.2023 |
SB2023011939 SB2023020908 SB2023032315 and 8 more |
||
| #VU70334 - Allocation of Resources Without Limits or Throttling CVE-2022-41717 |
CWE-770 | Medium | 9.2.0-0.20221128164006.a167075.el9 | 14.12.2022 |
SB2022121432 SB2022121433 SB2022121435 and 185 more |
||
| #VU69291 - Incorrect Authorization CVE-2022-2990 |
CWE-863 | Low | 9.2.0-0.20221128164006.a167075.el9 | 14.11.2022 |
SB2022111431 SB2022111435 SB2022111439 and 14 more |
||
| #VU68299 - Incorrect Permission Assignment for Critical Resource CVE-2022-0532 |
CWE-732 | Medium | 8.3.1-0.20220105174059.d2d3cd6.el8 | 13.10.2022 |
SB2022101333 SB2022101334 SB2022101335 and 4 more |
||
| #VU64269 - Integer overflow CVE-2022-28327 |
CWE-190 | Low | 8.6.1-0.20220623075054.1d50c23.el8 | 14.06.2022 |
SB2022041004 SB2022061422 SB2022061506 and 90 more |
||
| #VU64266 - Buffer overflow CVE-2022-24675 |
CWE-120 | Low | 8.6.1-0.20220623075054.1d50c23.el8 | 14.06.2022 |
SB2022041004 SB2022061422 SB2022061511 and 88 more |
||
| #VU64008 - Resource exhaustion CVE-2022-1708 |
CWE-400 | Medium | 8.3.1-0.20220606104811.3c9b113.el8 | 07.06.2022 |
SB2022060707 SB2022061334 SB2022061627 and 15 more |
||
| #VU63493 - Improper Access Control CVE-2022-1706 |
CWE-284 | Low | 8.6.1-0.20220623075054.1d50c23.el8 | 20.05.2022 |
SB2022052015 SB2022071162 SB2022071163 and 9 more |
||
| #VU63090 - Permissions, Privileges, and Access Controls CVE-2022-29162 |
CWE-264 | Medium | 8.6.1-0.20220623075054.1d50c23.el8 | 12.05.2022 |
SB2022051205 SB2022062435 SB2022071158 and 32 more |
||
| #VU62796 - Incorrect Default Permissions CVE-2022-27652 |
CWE-276 | Low | 8.1.1-0.20220623092113.0849a1b.el8 | 04.05.2022 |
SB2022050416 SB2022050422 SB2022080148 and 1 more |
||
| #VU62039 - Use of a Broken or Risky Cryptographic Algorithm CVE-2022-27191 |
CWE-327 | Medium | 8.6.1-0.20220623075054.1d50c23.el8 | 10.04.2022 |
SB2022041004 SB2022041406 SB2022081226 and 91 more |
||
| #VU62038 - Resource exhaustion CVE-2022-23772 |
CWE-400 | Medium | 8.6.1-0.20220623075054.1d50c23.el8 | 10.04.2022 |
SB2022041002 SB2022060126 SB2022060127 and 40 more |
||
| #VU62037 - Incorrect Authorization CVE-2022-23773 |
CWE-863 | Low | 8.6.1-0.20220623075054.1d50c23.el8 | 10.04.2022 |
SB2022041002 SB2022060126 SB2022060127 and 39 more |
||
| #VU62036 - Unchecked Return Value CVE-2022-23806 |
CWE-252 | Medium | 8.6.1-0.20220623075054.1d50c23.el8 | 10.04.2022 |
SB2022041002 SB2022041003 SB2022060126 and 46 more |
||
| #VU61599 - Improper input validation CVE-2022-21698 |
CWE-20 | Medium | 8.6.1-0.20220623075054.1d50c23.el8 | 24.03.2022 |
SB2022021530 SB2022032413 SB2022040807 and 110 more |
||
| #VU61227 - Incorrect Regular Expression CVE-2022-24921 |
CWE-185 | Medium | 8.6.1-0.20220623075054.1d50c23.el8 | 10.03.2022 |
SB2022031004 SB2022031005 SB2022041208 and 41 more |
Showing elements 21 - 40 out of 62