Known vulnerabilities in rpm-ostree (Red Hat package)

Vendor: Red Hat Inc.
Software: rpm-ostree (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:rpm-ostree_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 11
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting rpm-ostree (Red Hat package) rpm-ostree (Red Hat package) is affected by 11 known vulnerabilities: 2 high, 8 medium, 1 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87538 - Resource exhaustion
CVE-2024-28180		 CWE-400 Medium
No
No
 2024.3-3.el9_4 14.03.2024 SB2024031446
SB2024031447
SB2024031448
and 106 more
#VU86309 - Observable discrepancy
CVE-2023-45287		 CWE-203 Medium
No
No
 2024.2-1.el9 09.02.2024 SB2024020943
SB2024020944
SB2024021315
and 37 more
#VU85991 - Security Features
CVE-2024-21626		 CWE-254 High
Available
No
 2024.2-1.el9 01.02.2024 SB2024020112
SB2024020113
SB2024020123
and 78 more
#VU85580 - Permissions, Privileges, and Access Controls
CVE-2023-6476		 CWE-264 Medium
No
No
 2024.2-1.el9 18.01.2024 SB2024011845
SB2024011863
SB2024011872
and 3 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795		 CWE-326 Low
Available
No
 2024.2-1.el9 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU84507 - Resource exhaustion
CVE-2023-47108		 CWE-400 Medium
No
No
 2024.2-1.el9 18.12.2023 SB2023121825
SB2023122137
SB2024010436
and 55 more
#VU83928 - Resource exhaustion
CVE-2023-39326		 CWE-400 Medium
No
No
 2024.2-1.el9 06.12.2023 SB2023120641
SB2023121133
SB2023121156
and 90 more
#VU82064 - Resource exhaustion
CVE-2023-39325		 CWE-400 Medium
No
No
 2024.2-1.el9 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 2024.2-1.el9 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 652 more
#VU79767 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40225		 CWE-444 Medium
No
No
 2024.2-1.el9 21.08.2023 SB2023082120
SB2023082121
SB2023082122
and 17 more
#VU26474 - Uncontrolled Memory Allocation
CVE-2020-8552		 CWE-789 Medium
No
No
 2019.6-8.el8 31.03.2020 SB2020033111
SB2020040174
SB2020042251
and 6 more