Known vulnerabilities in satellite (Red Hat package) - page 2
Vendor:
Red Hat Inc.
Software:
satellite (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:satellite_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
92
Public exploits:
6
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
6.18.8-1.el9sat
6.16.12-1.el8sat
6.16.12-1.el9sat
6.17.10-1.el9sat
6.19.3-1.el9sat
6.19.2.1-1.el9sat
6.18.7.1-1.el9sat
6.17.9.1-1.el9sat
6.16.11-1.el8sat
6.16.11-1.el9sat
6.18.7-1.el9sat
6.16.10-1.el8sat
6.16.10-1.el9sat
6.17.9-1.el9sat
6.19.2-1.el9sat
6.18.6-1.el9sat
6.16.9-1.el8sat
6.16.9-1.el9sat
6.19.1-1.el9sat
6.16.8-1.el8sat
6.16.8-1.el9sat
6.17.8-1.el9sat
6.18.5-1.el9sat
6.16.7-1.el8sat
6.16.7-1.el9sat
6.17.7-1.el9sat
6.18.4-2.el9sat
6.16.6.1-1.el8sat
6.16.6.1-1.el9sat
6.17.6.3-1.el9sat
6.18.3-1.el9sat
6.15.5.7-1.el8sat
6.16.5.6-1.el8sat
6.16.5.6-1.el9sat
6.17.6.1-1.el9sat
6.18.1-1.el9sat
6.15.5.6-1.el8sat
6.16.5.5-1.el8sat
6.16.5.5-1.el9sat
6.17.6-1.el9sat
6.18.0-3.el9sat
6.15.5.5-1.el8sat
6.16.5.4-1.el8sat
6.16.5.4-1.el9sat
6.17.5-1.el9sat
6.15.5.4-1.el8sat
6.16.5.3-1.el8sat
6.16.5.3-1.el9sat
6.17.3-1.el9sat
6.15.5.3-1.el8sat
6.16.5.2-1.el8sat
6.16.5.2-1.el9sat
6.16.5.1-1.el8sat
6.16.5.1-1.el9sat
6.17.0.1-1.el9sat
6.17.0-2.el9sat
6.14.4.5-1.el8sat
6.15.5.2-1.el8sat
6.16.4-1.el8sat
6.16.4-1.el9sat
6.16.3-2.el8sat
6.16.3-2.el9sat
6.16.2-1.el8sat
6.16.2-1.el9sat
6.16.1-1.el8sat
6.16.1-1.el9sat
6.15.5-1.el8sat
6.16.0-2.el8sat
6.16.0-2.el9sat
6.15.4.2-1.el8sat
6.14.4.3-1.el8sat
6.13.7.3-1.el8sat
6.15.4-2.el8sat
6.13.7.2-1.el8sat
6.14.4.2-1.el8sat
6.15.3.1-2.el8sat
6.15.0-2.el8sat
6.14.3-1.el8sat
6.13.7-1.el8sat
6.14.2-1.el8sat
6.14.1-1.el8sat
6.14.0-3.el8sat
6.12.5.2-1.el8sat
6.11.5.6-1.el7sat
6.11.5.6-1.el8sat
6.13.5-1.el8sat
6.13.3-1.el8sat
6.13.1-1.el8sat
6.13.0-6.el8sat
6.12.3-1.el8sat
6.11.5-1.el8sat
6.11.5-1.el7sat
6.11.0-2.el7sat
6.11.0-2.el8sat
6.7.3-1.el7sat
6.10.0-3.el7sat
6.7.5-1.el7sat
6.8.0-1.el7sat
6.7.4-1.el7sat
6.7.2-1.el7sat
6.6.3-1.el7sat
6.6.2-1.el7sat
6.12.1-1.el8sat
6.9.10-1.el7sat
6.11.4-2.el8sat
6.11.4-2.el7sat
6.10.5-1.el7sat
6.9.9-1.el7sat
6.10.3-1.el7sat
6.10.2-1.el7sat
6.9.0-1.el7sat
6.5.3.2-1.el7sat
6.7.0-7.el7sat
6.6.0-7.el7sat
6.5.0-11.el7sat
6.3.5.1-1.el7sat
6.2.16.1-1.0.el6sat
6.2.16.1-1.0.el7sat
6.4.2.1-1.el7sat
6.4.0-15.el7sat
6.3.0-23.0.el7sat
6.2.14-4.0.el6sat
6.2.14-4.0.el7sat
6.2.0-21.1.el6sat
6.2.0-21.1.el7sat
6.2.1-1.2.el6sat
6.2.1-1.2.el7sat
6.2.2-1.1.el6sat
6.2.2-1.1.el7sat
6.6.2-1.el7
6.5.2.1-1.el7
6.5.2-1.el7
6.5.1-1.el7
6.4.4.2-1.el7
6.4.4-2.el7
6.4.3-1.el7
6.4.2.2-1.el7
6.4.2.1-1.el7
6.3.5.2-1.el7
6.3.5.1-1.el7
6.3.0.1-1.el7
6.6.1-1.el7
6.6.0-7.el7
6.5.3-1.el7
6.5.0-11.el7
6.4.3-2.el7
6.4.2-2.el7
6.4.1-1.el7
6.4.0-15.el7
6.3.5-1.el7
6.3.4-2.el7
6.3.3-2.el7
6.3.2-1.el7
6.3.1-3.el7
Vulnerabilities (92)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU99570 - Exposure of sensitive information to an unauthorized actor CVE-2024-8553 |
CWE-200 | Low | 6.13.7.3-1.el8sat, 6.14.4.3-1.el8sat, 6.15.4.2-1.el8sat, 6.16.0-2.el8sat, 6.16.0-2.el9sat | 31.10.2024 |
SB20241031110 SB2024110111 SB2024110112 and 2 more |
||
| #VU99568 - Missing release of memory after effective lifetime CVE-2024-8376 |
CWE-401 | Medium | 6.14.4.3-1.el8sat, 6.15.4.2-1.el8sat, 6.16.0-2.el8sat, 6.16.0-2.el9sat | 31.10.2024 |
SB20241031109 SB2024110111 SB2024110112 and 7 more |
||
| #VU97594 - Improper Authentication CVE-2024-7923 |
CWE-287 | High | 6.13.7.2-1.el8sat, 6.14.4.2-1.el8sat, 6.15.3.1-2.el8sat, 6.16.0-2.el8sat, 6.16.0-2.el9sat | 19.09.2024 |
SB2024092064 SB2024092065 SB2024092066 and 1 more |
||
| #VU97593 - Improper Authentication CVE-2024-7012 |
CWE-287 | High | 6.13.7.2-1.el8sat, 6.14.4.2-1.el8sat, 6.15.3.1-2.el8sat, 6.16.0-2.el8sat, 6.16.0-2.el9sat | 19.09.2024 |
SB2024092064 SB2024092065 SB2024092066 and 1 more |
||
| #VU96644 - Improper input validation CVE-2024-7246 |
CWE-20 | Medium | 6.16.0-2.el8sat, 6.16.0-2.el9sat | 30.08.2024 |
SB2024083031 SB2024083036 SB2024090612 and 11 more |
||
| #VU95445 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2024-42005 |
CWE-89 | High | 6.16.0-2.el8sat, 6.16.0-2.el9sat | 07.08.2024 |
SB2024080728 SB2024080771 SB2024080772 and 12 more |
||
| #VU95444 - Improper input validation CVE-2024-41991 |
CWE-20 | Medium | 6.15.4-2.el8sat | 07.08.2024 |
SB2024080728 SB2024080771 SB2024080772 and 12 more |
||
| #VU94792 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2024-5569 |
CWE-835 | Medium | 6.16.0-2.el8sat, 6.16.0-2.el9sat | 26.07.2024 |
SB2024072688 SB2024072690 SB2024072692 and 59 more |
||
| #VU94188 - Improper input validation CVE-2024-39614 |
CWE-20 | Medium | 6.16.0-2.el8sat, 6.16.0-2.el9sat | 12.07.2024 |
SB2024071225 SB2024071228 SB2024071229 and 15 more |
||
| #VU94184 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-39330 |
CWE-22 | Medium | 6.16.0-2.el8sat, 6.16.0-2.el9sat | 12.07.2024 |
SB2024071225 SB2024071228 SB2024071229 and 13 more |
||
| #VU94183 - Exposure of sensitive information to an unauthorized actor CVE-2024-39329 |
CWE-200 | Medium | 6.16.0-2.el8sat, 6.16.0-2.el9sat | 12.07.2024 |
SB2024071225 SB2024071228 SB2024071229 and 14 more |
||
| #VU94182 - Improper input validation CVE-2024-38875 |
CWE-20 | Medium | 6.16.0-2.el8sat, 6.16.0-2.el9sat | 12.07.2024 |
SB2024071225 SB2024071228 SB2024071229 and 13 more |
||
| #VU92406 - Incorrect Regular Expression CVE-2024-4067 |
CWE-185 | Medium | 6.16.0-2.el8sat, 6.16.0-2.el9sat | 20.06.2024 |
SB20240620121 SB2024062832 SB2024070501 and 41 more |
||
| #VU92262 - Exposure of sensitive information to an unauthorized actor CVE-2024-37891 |
CWE-200 | Low | 6.16.0-2.el8sat, 6.16.0-2.el9sat | 19.06.2024 |
SB2024061955 SB20240625146 SB2024062605 and 194 more |
||
| #VU91160 - Improper input validation CVE-2024-24790 |
CWE-20 | Medium | 6.15.4-2.el8sat | 05.06.2024 |
SB2024060520 SB2024060635 SB2024060729 and 90 more |
||
| #VU89167 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2024-1135 |
CWE-444 | Medium | 6.15.4-2.el8sat | 06.05.2024 |
SB2024050631 SB2024050632 SB2024050633 and 40 more |
||
| #VU88936 - Improper Authorization CVE-2023-4320 |
CWE-285 | Low | 6.15.0-2.el8sat | 23.04.2024 |
SB2024042346 |
||
| #VU87734 - Resource exhaustion CVE-2024-28863 |
CWE-400 | Medium | 6.16.0-2.el8sat, 6.16.0-2.el9sat | 22.03.2024 |
SB2024032234 SB2024052306 SB2024061114 and 30 more |
||
| #VU87129 - NULL Pointer Dereference CVE-2024-26130 |
CWE-476 | Medium | 6.15.4-2.el8sat | 05.03.2024 |
SB2024030534 SB2024030535 SB2024030546 and 41 more |
||
| #VU86810 - Exposure of sensitive information to an unauthorized actor CVE-2024-26144 |
CWE-200 | Medium | 6.15.5-1.el8sat | 27.02.2024 |
SB2024022643 SB2024032148 SB2024041240 and 4 more |
Showing elements 21 - 40 out of 92