Known vulnerabilities in servicemesh-proxy (Red Hat package)
Vendor:
Red Hat Inc.
Software:
servicemesh-proxy (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:servicemesh-proxy_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
24
Public exploits:
1
Known exploited (KEV):
0
Breakdown by Severity Chart
2.1.6-1.el8
2.0.9-3.el8
2.1.2-4.el8
1.1.17-2.el8
2.0.7-3.el8
1.1.14-1.el8
2.0.4-1.el8
2.0.3-1.el8
1.1.9-1.el8
1.1.5-1.el8
1.0.11-1.el8
1.1.4-2.el8
1.0.10-3.el8
1.1.2-3.el8
1.1.2-2.el8
1.1.0-4.el8
2.1.5-1.el8
2.0.11-1.el8
2.1.3-1.el8
2.0.10-1.el8
2.0.2-1.el8
2.1.0-13.el8
1.1.13-1.el8
1.0.10-2.el8
1.0.8-2.el8
1.0.6-1.el8
1.0.5-2.el8
1.0.4-1.el8
1.0.3-1.el8
1.0.2-3.el8
1.0.0-9.el8
0.12.0-3.el8
0.11.0-10.el8
1.0.9-2.el8
1.0.7-1.el8
1.0.1-7.el8
0.10.0-3.el7
0.9.1-1.el7
0.9.0-2.el7
0.8.0-2.el7
0.7.0-1.el7
0.6.0-1.el7
Vulnerabilities (24)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU71686 - Insufficient Entropy CVE-2021-4238 |
CWE-331 | Low | 2.1.6-1.el8 | 31.01.2023 |
SB2023013107 SB2023013111 SB2023013113 and 22 more |
||
| #VU66122 - Use of Insufficiently Random Values CVE-2022-30629 |
CWE-330 | Medium | 2.1.5-1.el8 | 05.08.2022 |
SB2022080501 SB2022080503 SB2022081106 and 81 more |
||
| #VU65835 - Incorrect Regular Expression CVE-2022-31129 |
CWE-185 | Medium | 2.0.11-1.el8, 2.1.5-1.el8 | 27.07.2022 |
SB2022072729 SB2022072901 SB2022081048 and 102 more |
||
| #VU64269 - Integer overflow CVE-2022-28327 |
CWE-190 | Low | 2.1.5-1.el8 | 14.06.2022 |
SB2022041004 SB2022061422 SB2022061506 and 90 more |
||
| #VU64266 - Buffer overflow CVE-2022-24675 |
CWE-120 | Low | 2.1.5-1.el8 | 14.06.2022 |
SB2022041004 SB2022061422 SB2022061511 and 88 more |
||
| #VU64157 - Incorrect Implementation of Authentication Algorithm CVE-2022-29226 |
CWE-303 | High | 2.1.3-1.el8 | 10.06.2022 |
SB2022061010 SB2022061422 SB2022070541 |
||
| #VU64155 - NULL Pointer Dereference CVE-2022-29224 |
CWE-476 | Medium | 2.0.10-1.el8, 2.1.3-1.el8 | 10.06.2022 |
SB2022061010 SB2022061332 SB2022061422 and 1 more |
||
| #VU64154 - Resource exhaustion CVE-2022-29225 |
CWE-400 | Medium | 2.0.10-1.el8, 2.1.3-1.el8 | 10.06.2022 |
SB2022061010 SB2022061332 SB2022061422 and 1 more |
||
| #VU63173 - Permissions, Privileges, and Access Controls CVE-2022-29526 |
CWE-264 | Low | 2.1.5-1.el8 | 14.05.2022 |
SB2022051403 SB2022051404 SB2022062928 and 65 more |
||
| #VU62463 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-24785 |
CWE-22 | Medium | 2.0.11-1.el8, 2.1.5-1.el8 | 20.04.2022 |
SB2022042016 SB2022042017 SB2022060317 and 67 more |
||
| #VU62038 - Resource exhaustion CVE-2022-23772 |
CWE-400 | Medium | 2.1.3-1.el8 | 10.04.2022 |
SB2022041002 SB2022060126 SB2022060127 and 40 more |
||
| #VU62037 - Incorrect Authorization CVE-2022-23773 |
CWE-863 | Low | 2.1.3-1.el8 | 10.04.2022 |
SB2022041002 SB2022060126 SB2022060127 and 39 more |
||
| #VU62036 - Unchecked Return Value CVE-2022-23806 |
CWE-252 | Medium | 2.1.3-1.el8 | 10.04.2022 |
SB2022041002 SB2022041003 SB2022060126 and 46 more |
||
| #VU61227 - Incorrect Regular Expression CVE-2022-24921 |
CWE-185 | Medium | 2.1.5-1.el8 | 10.03.2022 |
SB2022031004 SB2022031005 SB2022041208 and 41 more |
||
| #VU56151 - Improper Authorization CVE-2021-39156 |
CWE-285 | High | 1.1.17-2.el8, 2.0.7-3.el8 | 30.08.2021 |
SB2021083003 SB2021082532 SB2021082533 |
||
| #VU56150 - Improper Authorization CVE-2021-39155 |
CWE-285 | High | 1.1.17-2.el8, 2.0.7-3.el8 | 30.08.2021 |
SB2021083003 SB2021082532 SB2021082533 |
||
| #VU56149 - Exposure of sensitive information to an unauthorized actor CVE-2021-32779 |
CWE-200 | High | 1.1.17-2.el8, 2.0.7-3.el8 | 30.08.2021 |
SB2021083002 SB2021083003 SB2021082532 and 1 more |
||
| #VU56107 - Use After Free CVE-2021-32781 |
CWE-416 | Medium | 1.1.17-2.el8, 2.0.7-3.el8 | 26.08.2021 |
SB2021083002 SB2021083003 SB2021082532 and 1 more |
||
| #VU56106 - Improper Authorization CVE-2021-32777 |
CWE-285 | Medium | 1.1.17-2.el8, 2.0.7-3.el8 | 26.08.2021 |
SB2021083002 SB2021083003 SB2021082532 and 1 more |
||
| #VU28538 - Resource exhaustion CVE-2020-11080 |
CWE-400 | Medium | 1.0.10-3.el8, 1.1.2-3.el8 | 03.06.2020 |
SB2020060305 SB2020060607 SB2020060703 and 42 more |
Showing elements 1 - 20 out of 24