Known vulnerabilities in ose-aws-ecr-image-credential-provider (Red Hat package) - page 3

Vendor: Red Hat Inc.
Software: ose-aws-ecr-image-credential-provider (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:ose-aws-ecr-image-credential-provider_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 49
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ose-aws-ecr-image-credential-provider (Red Hat package) ose-aws-ecr-image-credential-provider (Red Hat package) is affected by 49 known vulnerabilities: 3 high, 37 medium, 9 low Critical High Medium Low

Vulnerabilities (49)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86309 - Observable discrepancy
CVE-2023-45287		 CWE-203 Medium
No
No
 4.15.0-202401231232.p0.gba252ab.assembly.stream.el9 09.02.2024 SB2024020943
SB2024020944
SB2024021315
and 37 more
#VU85991 - Security Features
CVE-2024-21626		 CWE-254 High
Available
No
 4.14.0-202401261353.p0.g607e2dd.assembly.stream.el8, 4.14.0-202401261353.p0.g607e2dd.assembly.stream.el9, 4.15.0-202401231232.p0.gba252ab.assembly.stream.el9 01.02.2024 SB2024020112
SB2024020113
SB2024020123
and 78 more
#VU85580 - Permissions, Privileges, and Access Controls
CVE-2023-6476		 CWE-264 Medium
No
No
 4.15.0-202401231232.p0.gba252ab.assembly.stream.el9 18.01.2024 SB2024011845
SB2024011863
SB2024011872
and 3 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795		 CWE-326 Low
Available
No
 4.15.0-202401231232.p0.gba252ab.assembly.stream.el9 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU84507 - Resource exhaustion
CVE-2023-47108		 CWE-400 Medium
No
No
 4.15.0-202401231232.p0.gba252ab.assembly.stream.el9 18.12.2023 SB2023121825
SB2023122137
SB2024010436
and 55 more
#VU83928 - Resource exhaustion
CVE-2023-39326		 CWE-400 Medium
No
No
 4.15.0-202401231232.p0.gba252ab.assembly.stream.el9 06.12.2023 SB2023120641
SB2023121133
SB2023121156
and 90 more
#VU82064 - Resource exhaustion
CVE-2023-39325		 CWE-400 Medium
No
No
 4.15.0-202401231232.p0.gba252ab.assembly.stream.el9 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 4.15.0-202401231232.p0.gba252ab.assembly.stream.el9 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 652 more
#VU79767 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40225		 CWE-444 Medium
No
No
 4.15.0-202401231232.p0.gba252ab.assembly.stream.el9 21.08.2023 SB2023082120
SB2023082121
SB2023082122
and 17 more


Showing elements 41 - 60 out of 49