Known vulnerabilities in skopeo (Red Hat package) - page 6
Vendor:
Red Hat Inc.
Software:
skopeo (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:skopeo_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
143
Public exploits:
7
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.22.2-8.el9_8
1.11.3-7.rhaos4.13.el8
1.11.3-7.rhaos4.13.el9
1.9.4-9.rhaos4.12.el8
1.9.4-10.rhaos4.12.el9
1.11.3-9.rhaos4.15.el8
1.11.3-10.rhaos4.15.el9
1.16.1-6.rhaos4.18.el8
1.16.1-7.rhaos4.18.el9
1.14.5-8.rhaos4.16.el8
1.14.5-8.rhaos4.16.el9
1.11.3-8.rhaos4.14.el8
1.11.3-8.rhaos4.14.el9
1.11.3-8.rhaos4.15.el8
1.11.3-9.rhaos4.15.el9
1.11.3-7.rhaos4.14.el8
1.11.3-7.rhaos4.14.el9
1.14.6-1.el9_4
1.14.5-7.rhaos4.16.el8
1.11.3-6.rhaos4.13.el8
1.11.3-6.rhaos4.13.el9
1.22.2-2.el10_2
1.22.2-6.el9_8
1.14.5-7.rhaos4.16.el9
1.11.4-0.1.el9_2.6
1.18.1-6.rhaos4.19.el9
1.18.1-3.el10_0.1
1.8.0-4.1.el9_0.3
1.11.4-0.1.el9_2.5
1.14.5-2.el9_4.4
1.18.1-5.el9_6
1.16.1-5.rhaos4.18.el9
1.18.1-5.rhaos4.19.el9
1.11.3-6.rhaos4.14.el8
1.11.3-6.rhaos4.14.el9
1.11.2-0.1.el9_2.4
1.14.5-5.rhaos4.16.el8
1.14.5-5.rhaos4.16.el9
1.11.3-7.rhaos4.15.el8
1.11.3-8.rhaos4.15.el9
1.16.1-3.rhaos4.18.el8
1.16.1-4.rhaos4.17.el8
1.16.1-4.rhaos4.17.el9
1.20.0-3.el10_1
1.14.5-2.el9_4.3
1.18.1-3.el9_6
1.18.1-3.el10_0
1.18.1-1.el9_6
1.11.3-6.rhaos4.15.el8
1.11.3-7.rhaos4.15.el9
1.14.5-4.rhaos4.16.el8
1.14.5-4.rhaos4.16.el9
1.16.1-1.rhaos4.18.el8
1.16.1-2.rhaos4.18.el9
1.16.1-2.rhaos4.17.el8
1.16.1-2.rhaos4.17.el9
1.18.1-2.rhaos4.19.el9
1.18.1-2.el10_0
1.18.1-2.el9_6
1.14.5-2.el9_4.1
1.16.1-1.rhaos4.17.el8
1.16.1-1.rhaos4.17.el9
1.16.1-1.rhaos4.18.el9
1.16.1-2.el9_5
1.16.1-1.el9
1.11.3-4.rhaos4.14.el8
1.11.3-4.rhaos4.14.el9
1.9.4-7.rhaos4.12.el8
1.9.4-7.rhaos4.12.el9
1.11.3-4.rhaos4.13.el8
1.11.3-4.rhaos4.13.el9
1.11.3-5.rhaos4.15.el8
1.11.3-6.rhaos4.15.el9
1.14.5-3.rhaos4.16.el8
1.14.5-3.rhaos4.16.el9
1.16.0-3.rhaos4.17.el8
1.16.0-3.rhaos4.17.el9
1.11.3-3.rhaos4.13.el8
1.11.3-3.rhaos4.13.el9
1.14.5-2.el9_4
1.16.0-2.rhaos4.17.el8
1.16.0-2.rhaos4.17.el9
1.11.2-0.1.el9_2.2
1.8.0-4.1.el9_0
1.11.3-3.rhaos4.14.el8
1.11.3-3.rhaos4.14.el9
1.11.3-4.rhaos4.15.el8
1.11.3-4.rhaos4.15.el9
1.11.3-3.rhaos4.15.el8
1.11.3-3.rhaos4.15.el9
1.11.3-2.rhaos4.13.el8
1.11.3-2.rhaos4.13.el9
1.11.3-2.rhaos4.14.el8
1.11.3-2.rhaos4.14.el9
1.9.4-6.rhaos4.12.el8
1.9.4-6.rhaos4.12.el9
1.14.3-3.el9_4
1.14.4-1.rhaos4.16.el8
1.14.4-1.rhaos4.16.el9
1.9.4-4.3.rhaos4.12.el8
1.9.4-4.3.rhaos4.12.el9
1.11.3-0.2.rhaos4.13.el8
1.11.3-0.2.rhaos4.13.el9
1.11.3-0.1.rhaos4.14.el8
1.11.3-0.1.rhaos4.14.el9
1.11.3-0.1.rhaos4.15.el8
1.11.3-0.1.rhaos4.15.el9
1.14.3-2.el9_4
1.14.3-0.1.el9
1.11.2-10.4.rhaos4.14.el8
1.11.2-21.3.rhaos4.15.el8
1.11.2-21.3.rhaos4.15.el9
1.9.4-3.3.rhaos4.12.el8
1.9.4-3.3.rhaos4.12.el9
1.11.2-2.2.rhaos4.13.el8
1.11.2-2.2.rhaos4.13.el9
1.11.2-10.3.rhaos4.14.el8
1.11.2-10.3.rhaos4.14.el9
1.9.4-3.2.rhaos4.12.el8
1.9.4-3.2.rhaos4.12.el9
1.11.2-21.2.rhaos4.15.el8
1.11.2-21.2.rhaos4.15.el9
1.13.3-4.el9_3
1.11.2-21.1.rhaos4.15.el9
1.13.3-3.el9_3
1.5.2-4.1.rhaos4.11.el8
1.13.3-1.el9
1.9.4-3.1.rhaos4.12.el9
1.11.2-10.1.rhaos4.14.el8
1.11.2-10.1.rhaos4.14.el9
1.2.4-1.1.el8
1.5.2-4.rhaos4.11.el8
1.9.4-3.1.rhaos4.12.el8
1.9.4-3.rhaos4.12.el9
1.11.2-2.rhaos4.13.el8
1.11.2-2.1.rhaos4.13.el9
1.9.4-2.1.rhaos4.12.el8
1.11.2-1.1.rhaos4.13.el9
1.10.0-1.rhaos4.13.el9
1.11.2-0.1.el9
1.9.4-2.rhaos4.12.el8
1.9.4-2.rhaos4.12.el9
1.5.2-3.rhaos4.11.el8
1.1.1-2.rhaos4.6.el8
0.1.40-5.rhaos.el8
1.8.0-1.rhaos4.12.el8
1.8.0-5.rhaos4.12.el9
1.9.2-1.el9
1.2.2-1.rhaos4.10.el8
1.1.1-2.rhaos4.5.el8
1.1.1-3.rhaos4.6.el8
0.1.40-12.el7_9
0.1.32-5.git1715c90.el8
0.1.40-11.el7_8
0.1.40-3.rhaos.el8
0.1.40-7.el7_8
0.1.40-2.el8
0.1.32-6.git1715c90.el8_0
0.1.40-4.rhaos.el8
0.1.32-7.git1715c90.rhaos4.2.el8
0.1.40-2.el7
Vulnerabilities (143)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU74843 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2023-0778 |
CWE-367 | Medium | 1.10.0-1.rhaos4.13.el9 | 11.04.2023 |
SB2023041130 SB2023041131 SB2023051738 and 10 more |
||
| #VU74481 - Improper Access Control CVE-2023-0229 |
CWE-284 | Low | 1.10.0-1.rhaos4.13.el9 | 05.04.2023 |
SB2023040518 SB2023040543 SB2023051810 and 3 more |
||
| #VU72339 - Resource exhaustion CVE-2023-25577 |
CWE-400 | Medium | 1.10.0-1.rhaos4.13.el9 | 16.02.2023 |
SB2023021673 SB2023022875 SB2023031332 and 49 more |
||
| #VU72334 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-25725 |
CWE-444 | Medium | 1.10.0-1.rhaos4.13.el9 | 16.02.2023 |
SB2023021659 SB2023021662 SB2023021663 and 22 more |
||
| #VU68299 - Incorrect Permission Assignment for Critical Resource CVE-2022-0532 |
CWE-732 | Medium | 1.2.2-1.rhaos4.10.el8 | 13.10.2022 |
SB2022101333 SB2022101334 SB2022101335 and 4 more |
||
| #VU64269 - Integer overflow CVE-2022-28327 |
CWE-190 | Low | 1.5.2-3.rhaos4.11.el8, 1.5.2-4.rhaos4.11.el8 | 14.06.2022 |
SB2022041004 SB2022061422 SB2022061506 and 90 more |
||
| #VU64266 - Buffer overflow CVE-2022-24675 |
CWE-120 | Low | 1.5.2-3.rhaos4.11.el8, 1.5.2-4.rhaos4.11.el8 | 14.06.2022 |
SB2022041004 SB2022061422 SB2022061511 and 88 more |
||
| #VU63493 - Improper Access Control CVE-2022-1706 |
CWE-284 | Low | 1.5.2-3.rhaos4.11.el8 | 20.05.2022 |
SB2022052015 SB2022071162 SB2022071163 and 9 more |
||
| #VU63090 - Permissions, Privileges, and Access Controls CVE-2022-29162 |
CWE-264 | Medium | 1.5.2-3.rhaos4.11.el8 | 12.05.2022 |
SB2022051205 SB2022062435 SB2022071158 and 32 more |
||
| #VU62797 - Improper Locking CVE-2021-20291 |
CWE-667 | Medium | 1.9.2-1.el9 | 04.05.2022 |
SB2021040182 SB2022050417 SB2022092037 and 13 more |
||
| #VU62039 - Use of a Broken or Risky Cryptographic Algorithm CVE-2022-27191 |
CWE-327 | Medium | 1.5.2-3.rhaos4.11.el8 | 10.04.2022 |
SB2022041004 SB2022041406 SB2022081226 and 91 more |
||
| #VU62038 - Resource exhaustion CVE-2022-23772 |
CWE-400 | Medium | 1.5.2-3.rhaos4.11.el8, 1.5.2-4.rhaos4.11.el8 | 10.04.2022 |
SB2022041002 SB2022060126 SB2022060127 and 40 more |
||
| #VU62037 - Incorrect Authorization CVE-2022-23773 |
CWE-863 | Low | 1.5.2-3.rhaos4.11.el8 | 10.04.2022 |
SB2022041002 SB2022060126 SB2022060127 and 39 more |
||
| #VU62036 - Unchecked Return Value CVE-2022-23806 |
CWE-252 | Medium | 1.5.2-3.rhaos4.11.el8 | 10.04.2022 |
SB2022041002 SB2022041003 SB2022060126 and 46 more |
||
| #VU61599 - Improper input validation CVE-2022-21698 |
CWE-20 | Medium | 1.5.2-3.rhaos4.11.el8 | 24.03.2022 |
SB2022021530 SB2022032413 SB2022040807 and 110 more |
||
| #VU61227 - Incorrect Regular Expression CVE-2022-24921 |
CWE-185 | Medium | 1.5.2-3.rhaos4.11.el8 | 10.03.2022 |
SB2022031004 SB2022031005 SB2022041208 and 41 more |
||
| #VU58229 - Type confusion CVE-2021-41190 |
CWE-843 | Low | 1.2.2-1.rhaos4.10.el8 | 18.11.2021 |
SB2021111806 SB2021111807 SB2021111809 and 39 more |
||
| #VU57150 - Improper Certificate Validation CVE-2014-3577 |
CWE-295 | Low | 1.2.2-1.rhaos4.10.el8 | 08.10.2021 |
SB2014082106 SB2021100807 SB2023020872 and 24 more |
||
| #VU57149 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-21684 |
CWE-79 | Low | 1.2.2-1.rhaos4.10.el8 | 08.10.2021 |
SB2021100806 SB2023022165 SB2022031044 and 1 more |
||
| #VU56024 - Resource Management Errors CVE-2021-33198 |
CWE-399 | Medium | 1.9.2-1.el9 | 22.08.2021 |
SB2021070405 SB2021082204 SB2021083116 and 46 more |
Showing elements 101 - 120 out of 143