Known vulnerabilities in Red Hat OpenShift distributed tracing (RHOSDT)

Vendor: Red Hat Inc.
Software: Red Hat OpenShift distributed tracing (RHOSDT)
Software CPE: cpe:2.3:a:red_hat:rhosdt:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 74
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenShift distributed tracing (RHOSDT) Red Hat OpenShift distributed tracing (RHOSDT) is affected by 74 known vulnerabilities: 10 high, 48 medium, 16 low Critical High Medium Low

Vulnerabilities (74)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU115712 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-45286		 CWE-362 High
No
No
 3.2.0 17.09.2025 SB2023112862
SB2025091750
SB20240611290
and 1 more
#VU93519 - Out-of-bounds read
CVE-2024-37371		 CWE-125 Medium
No
No
 3.3.0 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 114 more
#VU93518 - Improper input validation
CVE-2024-37370		 CWE-20 Medium
No
No
 3.3.0 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 96 more
#VU91596 - Memory corruption
CVE-2024-36129		 CWE-119 High
No
No
 3.2.1 10.06.2024 SB2024061020
SB2024061021
SB2024061741
and 2 more
#VU89712 - Stack-based buffer overflow
CVE-2024-33599		 CWE-121 High
No
No
 3.2.0 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 84 more
#VU89711 - NULL Pointer Dereference
CVE-2024-33600		 CWE-476 Medium
No
No
 3.2.0 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 83 more
#VU89710 - Allocation of Resources Without Limits or Throttling
CVE-2024-33601		 CWE-770 Low
No
No
 3.2.0 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 82 more
#VU89709 - Memory corruption
CVE-2024-33602		 CWE-119 Medium
No
No
 3.2.0 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 91 more
#VU88226 - Missing release of memory after effective lifetime
CVE-2024-26461		 CWE-401 Medium
No
No
 3.2.0 09.04.2024 SB2024040939
SB2024040943
SB20240611102
and 46 more
#VU88225 - Missing release of memory after effective lifetime
CVE-2024-26458		 CWE-401 Medium
No
No
 3.2.0 09.04.2024 SB2024040938
SB2024040943
SB20240611102
and 47 more
#VU88184 - Resource exhaustion
CVE-2023-45288		 CWE-400 Medium
Available
No
 3.2.0 05.04.2024 SB2024040533
SB2024040549
SB2024040551
and 187 more
#VU87850 - Missing Release of Resource after Effective Lifetime
CVE-2024-2398		 CWE-772 Medium
No
No
 3.3.0 27.03.2024 SB2024032713
SB2024032740
SB2024032744
and 106 more
#VU87671 - Cryptographic Issues
CVE-2024-28834		 CWE-310 Medium
No
No
 3.2.0 20.03.2024 SB2024032057
SB2024032058
SB2024032059
and 111 more
#VU87326 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24786		 CWE-835 Medium
No
No
 3.2.0 11.03.2024 SB2024031115
SB2024031435
SB2024031555
and 134 more
#VU87201 - Improper input validation
CVE-2024-24784		 CWE-20 Medium
No
No
 3.2.0 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 48 more
#VU87200 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-24785		 CWE-79 Low
No
No
 3.2.0 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 61 more
#VU87198 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45289		 CWE-200 Low
No
No
 3.2.0 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 54 more
#VU87197 - Resource exhaustion
CVE-2023-45290		 CWE-400 Medium
No
No
 3.2.0 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 101 more
#VU87196 - Error Handling
CVE-2024-24783		 CWE-388 Medium
No
No
 3.2.0 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 81 more
#VU84538 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-6004		 CWE-78 Medium
No
No
 3.2.0 19.12.2023 SB2023121905
SB2023121906
SB2023121910
and 58 more


Showing elements 1 - 20 out of 74