Known vulnerabilities in ovirt-hosted-engine-ha (Red Hat package)
Vendor:
Red Hat Inc.
Software:
ovirt-hosted-engine-ha (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:ovirt-hosted-engine-ha_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
5
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
2.4.6-1.el8ev
2.5.0-1.el8ev
2.4.8-1.el8ev
2.4.7-1.el8ev
2.3.6-1.el7
2.3.5-1.el7
2.3.3-1.el7
2.3.1-1.el7
2.2.19-1.el7
2.2.18-1.el7
2.2.16-1.el7
2.2.14-1.el7
2.2.11-1.el7
2.1.11-1.el7
2.1.8-1.el7
2.1.7-1.el7
2.1.5-1.el7
2.1.4-1.el7
2.1.0.6-1.el7
2.1.0.5-2.el7
2.1.0.5-1.el7
2.0.7-2.el7
2.0.6-1.el7
2.0.4-1.el7
2.0.3-1.el7
2.0.2-1.el7
1.3.5.10-2.el7
1.3.5.9-2.el7
1.3.5.8-1.el7
1.3.5.7-1.el7
1.3.5.5-1.el7
1.3.5.3-1.el7
1.3.5.1-1.el7
1.3.4.3-1.el7
1.2.10-1.el7
1.2.8-1.el7
1.2.7.2-1.el7
1.2.6-3.el7
1.2.6-2.el7
1.2.5-1.el7
1.2.4-5.el7
1.2.10-1.el6
1.2.8-1.el6
1.2.7.2-1.el6
1.2.6-3.el6
1.2.6-2.el6
1.2.5-1.el6
1.2.4-5.el6
1.1.6-3.el6
1.1.5-1.el6
1.1.2-5.el6
1.1.2-1.el6
1.0.0-3.el6
1.0.0-2.el6
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU54394 - Incorrect Regular Expression CVE-2020-28500 |
CWE-185 | Medium | 2.4.8-1.el8ev | 27.06.2021 |
SB2021062702 SB2021062703 SB2021090905 and 30 more |
||
| #VU53202 - Command injection CVE-2021-23337 |
CWE-77 | Medium | 2.4.8-1.el8ev | 12.05.2021 |
SB2021021525 SB2021051230 SB2021062703 and 59 more |
||
| #VU50990 - Integer overflow CVE-2020-36242 |
CWE-190 | High | 2.4.7-1.el8ev | 28.02.2021 |
SB2021022812 SB2021022813 SB2021052024 and 27 more |
||
| #VU50367 - Covert Timing Channel CVE-2020-25659 |
CWE-385 | Medium | 2.4.7-1.el8ev | 11.01.2021 |
SB2020111230 SB2021052024 SB2021060319 and 18 more |
||
| #VU48444 - Uncontrolled Recursion CVE-2020-28196 |
CWE-674 | Medium | 2.4.7-1.el8ev | 06.11.2020 |
SB2020111617 SB2020111618 SB2020112306 and 23 more |