Known vulnerabilities in Red Hat OpenShift Jaeger

Vendor: Red Hat Inc.
Software: Red Hat OpenShift Jaeger
Software CPE: cpe:2.3:a:red_hat:red_hat_openshift_jaeger:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 49
Public exploits: 3
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenShift Jaeger Red Hat OpenShift Jaeger is affected by 49 known vulnerabilities: 6 high, 31 medium, 12 low Critical High Medium Low

Vulnerabilities (49)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU56024 - Resource Management Errors
CVE-2021-33198		 CWE-399 Medium
No
No
 1.20.5 22.08.2021 SB2021070405
SB2021082204
SB2021083116
and 46 more
#VU56023 - Missing Authorization
CVE-2021-33197		 CWE-862 Medium
No
No
 1.20.5 22.08.2021 SB2021070405
SB2021082204
SB2021083116
and 41 more
#VU56022 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-33195		 CWE-79 Medium
No
No
 1.20.5 22.08.2021 SB2021070405
SB2021082204
SB2021083116
and 38 more
#VU55667 - Resource exhaustion
CVE-2021-27292		 CWE-400 Medium
No
No
 1.24.0 09.08.2021 SB2021080911
SB2021080914
SB2022012431
and 3 more
#VU55665 - Improper Certificate Validation
CVE-2021-34558		 CWE-295 Medium
Available
No
 1.20.5 09.08.2021 SB2021080909
SB2021080912
SB2021081122
and 65 more
#VU55034 - Uncontrolled Memory Allocation
CVE-2021-33910		 CWE-789 Low
Available
No
 1.20.5, 1.24.0 20.07.2021 SB2021072031
SB2021072032
SB2021072206
and 31 more
#VU54521 - Resource exhaustion
CVE-2021-33196		 CWE-400 Medium
No
No
 1.20.5 04.07.2021 SB2021070405
SB2021070406
SB2021071515
and 37 more
#VU54477 - Insufficient Verification of Data Authenticity
CVE-2021-20271		 CWE-345 Medium
No
No
 1.20.5, 1.24.0 30.06.2021 SB2021063035
SB2021063038
SB2021071302
and 35 more
#VU54225 - Use After Free
CVE-2021-3518		 CWE-416 High
No
No
 1.20.5, 1.24.0 18.06.2021 SB2020110609
SB2021061811
SB2021063005
and 40 more
#VU54224 - Out-of-bounds write
CVE-2021-3517		 CWE-787 High
No
No
 1.20.5, 1.24.0 18.06.2021 SB2020110609
SB2021061811
SB2021063005
and 42 more
#VU54223 - NULL Pointer Dereference
CVE-2021-3537		 CWE-476 Medium
No
No
 1.20.5, 1.24.0 18.06.2021 SB2020110609
SB2021061811
SB2021063005
and 27 more
#VU54222 - Use After Free
CVE-2021-3516		 CWE-416 High
No
No
 1.20.5, 1.24.0 18.06.2021 SB2020110609
SB2021061811
SB2021063005
and 28 more
#VU53439 - Integer overflow
CVE-2021-3520		 CWE-190 High
No
No
 1.20.5, 1.24.0 24.05.2021 SB2021052411
SB2021052522
SB2021052537
and 33 more
#VU53289 - Improper input validation
CVE-2021-3541		 CWE-20 Medium
No
No
 1.20.5, 1.24.0 16.05.2021 SB2021051601
SB2021051602
SB2021061811
and 32 more
#VU51455 - Incorrect Conversion between Numeric Types
CVE-2021-27218		 CWE-681 Low
No
No
 1.20.5 15.03.2021 SB2021021523
SB2021032305
SB2021070711
and 25 more
#VU50684 - Improper input validation
CVE-2020-13949		 CWE-20 Medium
No
No
 1.20.4 15.02.2021 SB2021021505
SB2021022701
SB2021030911
and 13 more
#VU50621 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-27619		 CWE-94 Medium
No
No
 1.17.9, 1.20.4 11.02.2021 SB2020112330
SB2021032307
SB2021032607
and 24 more
#VU50404 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-27618		 CWE-835 Medium
No
No
 1.17.9, 1.20.4 04.01.2021 SB2021020709
SB2021020710
SB2021020711
and 31 more
#VU48946 - Memory corruption
CVE-2020-29363		 CWE-119 Medium
No
No
 1.17.9, 1.20.4 14.12.2020 SB2020121401
SB2020121402
SB2020121424
and 17 more
#VU48592 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2020-26116		 CWE-93 Medium
No
No
 1.17.9, 1.20.4 27.09.2020 SB2020092711
SB2020112308
SB2020112309
and 34 more


Showing elements 1 - 20 out of 49