Known vulnerabilities in podman (Red Hat package) - page 8

Vendor: Red Hat Inc.
Software: podman (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:podman_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 157
Public exploits: 9
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting podman (Red Hat package) podman (Red Hat package) is affected by 157 known vulnerabilities: 9 high, 101 medium, 47 low Critical High Medium Low

Vulnerabilities (157)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU56245 - Improper input validation
CVE-2021-25735		 CWE-20 Medium
Available
No
 3.0.1-6.el8 01.09.2021 SB2021090125
SB2021090126
SB2022083132
and 4 more
#VU53436 - Exposure of sensitive information to an unauthorized actor
CVE-2021-25737		 CWE-200 Low
No
No
 3.0.1-6.el8 24.05.2021 SB2021052409
SB2021060911
SB2021090126
and 4 more
#VU53152 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21648		 CWE-79 Low
No
No
 3.0.1-6.el8 12.05.2021 SB2021051209
SB2021090126
SB2022083132
and 1 more
#VU51994 - Improper Authentication
CVE-2021-21640		 CWE-287 Low
No
No
 3.0.1-6.el8 08.04.2021 SB2021040814
SB2021052527
SB2021062509
and 3 more
#VU51993 - Improper input validation
CVE-2021-21639		 CWE-20 Low
No
No
 3.0.1-6.el8 08.04.2021 SB2021040814
SB2021052527
SB2021062509
and 3 more
#VU51017 - Permissions, Privileges, and Access Controls
CVE-2021-20188		 CWE-264 Low
No
No
 1.6.4-29.el7_9 02.03.2021 SB2021030203
SB2021030204
SB2021030406
and 3 more
#VU47117 - Exposure of sensitive information to an unauthorized actor
CVE-2020-14370		 CWE-200 Low
No
No
 1.6.4-26.el7_9 23.09.2020 SB2020092707
SB2020092708
SB2020092808
and 7 more
#VU45699 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-16845		 CWE-835 Medium
No
No
 1.9.3-2.rhaos4.5.el8 14.08.2020 SB2020081403
SB2020081404
SB2020081405
and 44 more
#VU31891 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-15586		 CWE-362 Medium
No
No
 1.9.3-2.rhaos4.5.el8 27.07.2020 SB2020072734
SB2020072735
SB2020072749
and 37 more
#VU34248 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-14040		 CWE-835 Medium
No
No
 1.6.4-26.el7_9 17.06.2020 SB2020061731
SB2020100906
SB2020102814
and 25 more
#VU26643 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-10696		 CWE-22 High
No
No
 1.0.2-4.dev.git96ccc2e.rhaos4.1.el8, 1.4.2-6.rhaos4.2.el8, 1.6.4-10.rhaos4.3.el8, 1.6.4-18.el7_8 07.04.2020 SB2020040723
SB2020042905
SB2020043013
and 12 more
#VU26515 - UNIX Symbolic Link (Symlink) Following
CVE-2019-18466		 CWE-61 Medium
No
No
 1.6.4-16.el7_8 01.04.2020 SB2019102810
SB2020040149
SB2020040151
#VU26514 - Resource exhaustion
CVE-2020-1702		 CWE-400 Medium
No
No
 1.6.4-16.el7_8 01.04.2020 SB2020040142
SB2020040143
SB2020040149
and 7 more
#VU25501 - Use After Free
CVE-2020-8945		 CWE-416 High
No
No
 1.6.4-18.el7_8 21.02.2020 SB2020022110
SB2020031116
SB2020031126
and 23 more
#VU21118 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-10392		 CWE-78 Medium
No
No
 1.0.2-3.dev.git96ccc2e.el8_0 16.09.2019 SB2019091607
SB2020061842
SB2020022451
and 2 more
#VU20201 - Resource exhaustion
CVE-2019-9514		 CWE-400 Medium
No
No
 1.0.2-2.dev.git96ccc2e.el8 13.08.2019 SB2019081326
SB2019082004
SB2019082502
and 79 more
#VU20200 - Resource exhaustion
CVE-2019-9512		 CWE-400 Medium
No
No
 1.0.2-2.dev.git96ccc2e.el8 13.08.2019 SB2019081326
SB2019082006
SB2019082502
and 72 more


Showing elements 141 - 160 out of 157