Known vulnerabilities in VolSync

Vendor: Red Hat Inc.
Software: VolSync
Software CPE: cpe:2.3:a:red_hat:volsync:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 34
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting VolSync VolSync is affected by 34 known vulnerabilities: 3 high, 22 medium, 9 low Critical High Medium Low

Vulnerabilities (34)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118717 - Improper input validation
CVE-2025-47913		 CWE-20 Low
No
No
 0.14.0 24.11.2025 SB2025112448
SB2025112455
SB2025112456
and 53 more
#VU118190 - Resource exhaustion
CVE-2025-58183		 CWE-400 Medium
No
No
 0.14.0 07.11.2025 SB2025110705
SB2025110725
SB2025110726
and 172 more
#VU105461 - Resource exhaustion
CVE-2025-22868		 CWE-400 Medium
No
No
 0.12.1 10.03.2025 SB2025031013
SB2025031015
SB2025031076
and 89 more
#VU105459 - Resource exhaustion
CVE-2025-22869		 CWE-400 Low
No
No
 0.12.1 10.03.2025 SB2025031011
SB2025031015
SB2025032557
and 107 more
#VU104099 - Use After Free
CVE-2024-56171		 CWE-416 High
No
No
 0.12.1 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU104098 - Stack-based buffer overflow
CVE-2025-24928		 CWE-121 High
No
No
 0.12.1 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU101868 - Resource exhaustion
CVE-2024-45338		 CWE-400 Medium
No
No
 0.10.2, 0.11.1 19.12.2024 SB2024121932
SB2024123101
SB2025010619
and 137 more
#VU101816 - Insufficient Verification of Data Authenticity
CVE-2024-53259		 CWE-345 Medium
No
No
 0.10.2, 0.11.1 17.12.2024 SB2024121770
SB2024121771
SB2025012135
and 5 more
#VU101777 - Improper Authorization
CVE-2024-45337		 CWE-285 Medium
Available
No
 0.10.2, 0.11.1 13.12.2024 SB2024121332
SB2024121333
SB2024121334
and 93 more
#VU101111 - Divide By Zero
CVE-2024-53122		 CWE-369 Low
No
No
 0.11.1 03.12.2024 SB2024120317
SB2025010804
SB2025010805
and 65 more
#VU94949 - Use After Free
CVE-2024-41040		 CWE-416 Low
No
No
 0.11.1 31.07.2024 SB2024073132
SB2024080967
SB2024080969
and 49 more
#VU94135 - Improper input validation
CVE-2024-26830		 CWE-20 Low
No
No
 0.11.1 11.07.2024 SB20240711175
SB20240711188
SB20240711224
and 25 more
#VU87326 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24786		 CWE-835 Medium
No
No
 0.9.1 11.03.2024 SB2024031115
SB2024031435
SB2024031555
and 134 more
#VU78454 - Untrusted Search Path
CVE-2023-38408		 CWE-426 Medium
Available
No
 0.5.4, 0.6.3 20.07.2023 SB2023072068
SB2023072073
SB2023072074
and 73 more
#VU75740 - Improper Authentication
CVE-2023-2283		 CWE-287 High
No
No
 0.5.4, 0.6.3, 0.7.3 04.05.2023 SB2023050456
SB2023050501
SB2023052441
and 84 more
#VU74146 - Improper Privilege Management
CVE-2023-26604		 CWE-269 Low
No
No
 0.5.4, 0.6.3, 0.7.3 28.03.2023 SB2023032869
SB2023032871
SB2023040540
and 56 more
#VU73828 - State Issues
CVE-2023-27535		 CWE-371 Low
No
No
 0.5.4, 0.6.3 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 84 more
#VU72618 - Improper input validation
CVE-2023-24329		 CWE-20 Medium
No
No
 0.6.3, 0.7.3 28.02.2023 SB2023022819
SB2023022822
SB2023030832
and 158 more
#VU72125 - Inadequate Encryption Strength
CVE-2023-0361		 CWE-326 Medium
No
No
 0.5.4, 0.6.3 11.02.2023 SB2023021103
SB2023021109
SB2023021561
and 88 more
#VU69582 - NULL Pointer Dereference
CVE-2022-36227		 CWE-476 Low
No
No
 0.5.4, 0.6.3 24.11.2022 SB2022112432
SB2022112437
SB2022112438
and 77 more


Showing elements 1 - 20 out of 34