Known vulnerabilities in servicemesh-cni (Red Hat package)

Known vulnerabilities in servicemesh-cni (Red Hat package)

Vendor: Red Hat Inc.

Software: servicemesh-cni (Red Hat package)

Software CPE: cpe:2.3:o:red_hat:servicemesh-cni_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 8

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Vulnerabilities (8)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU65835 - Incorrect Regular Expression CVE-2022-31129	CWE-185	Medium	No	No	2.0.11-1.el8	27.07.2022	SB2022072729 SB2022072901 SB2022081048 and 102 more
#VU64155 - NULL Pointer Dereference CVE-2022-29224	CWE-476	Medium	No	No	2.0.10-1.el8	10.06.2022	SB2022061010 SB2022061332 SB2022061422 and 1 more
#VU64154 - Resource exhaustion CVE-2022-29225	CWE-400	Medium	No	No	2.0.10-1.el8	10.06.2022	SB2022061010 SB2022061332 SB2022061422 and 1 more
#VU62463 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-24785	CWE-22	Medium	No	No	2.0.11-1.el8	20.04.2022	SB2022042016 SB2022042017 SB2022060317 and 65 more
#VU48480 - Improper input validation CVE-2020-28362	CWE-20	Medium	No	No	2.0.2-2.el8	17.11.2020	SB2020111715 SB2020111716 SB2020111225 and 30 more
#VU45699 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2020-16845	CWE-835	Medium	No	No	1.1.11-2.el8	14.08.2020	SB2020081403 SB2020081404 SB2020081405 and 44 more
#VU31891 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2020-15586	CWE-362	Medium	No	No	1.1.11-2.el8	27.07.2020	SB2020072734 SB2020072735 SB2020072749 and 37 more
#VU22824 - Resource exhaustion CVE-2019-11253	CWE-400	Medium	No	No	1.0.11-1.el8, 1.1.4-2.el8	18.11.2019	SB2019101712 SB2019111815 SB2020020731 and 12 more