python-imgbased vulnerabilities

Known vulnerabilities in the python-imgbased package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
H Insufficiently Protected Credentials	<0:1.1.9-0.1.el7ev
M Untrusted Search Path	<0:1.0.22-1.el7ev
M Improper Input Validation	<0:1.0.22-1.el7ev
M Information Exposure Through Log Files	<0:1.0.20-0.1.el7ev
H Incorrect Privilege Assignment	<0:1.0.16-0.1.el7ev
M Allocation of Resources Without Limits or Throttling	<0:1.0.29-1.el7ev
M Improper Input Validation	<0:1.0.29-1.el7ev
M Resource Exhaustion	<0:1.0.29-1.el7ev
M Directory Traversal	<0:1.0.29-1.el7ev
M Heap-based Buffer Overflow	<0:1.0.29-1.el7ev
M Buffer Overflow	<0:1.0.29-1.el7ev
M Improper Input Validation	<0:1.0.29-1.el7ev
M Improper Input Validation	<0:1.0.29-1.el7ev
M Improper Input Validation	<0:1.0.29-1.el7ev
M Link Following	<0:1.0.29-1.el7ev
M Improper Input Validation	<0:1.0.29-1.el7ev
M Improper Input Validation	<0:1.0.29-1.el7ev
M Information Exposure	<0:1.0.29-1.el7ev
M NULL Pointer Dereference	<0:1.0.29-1.el7ev
M Stack-based Buffer Overflow	<0:1.0.29-1.el7ev
M Untrusted Search Path	<0:1.0.29-1.el7ev
H Integer Overflow or Wraparound	<0:1.1.9-0.1.el7ev
M Authentication Bypass by Primary Weakness	<0:1.0.29-1.el7ev
M Deserialization of Untrusted Data	<0:1.0.29-1.el7ev
M Improper Input Validation	<0:1.0.29-1.el7ev
M Out-of-Bounds	<0:1.0.29-1.el7ev
H Arbitrary Command Injection	<0:1.0.16-0.1.el7ev
H Integer Overflow or Wraparound	<0:1.0.17-0.1.el7ev
H Integer Overflow or Wraparound	<0:1.0.17-0.1.el7ev
H Directory Traversal	<0:1.0.24-1.el7ev
H Execution with Unnecessary Privileges	<0:1.0.16-0.1.el7ev
H Execution with Unnecessary Privileges	<0:1.0.16-0.1.el7ev
H Improper Privilege Management	<0:1.1.9-0.1.el7ev
H Stack-based Buffer Overflow	<0:1.1.9-0.1.el7ev
M Covert Timing Channel	<0:1.1.10-0.1.el7ev
H Missing Required Cryptographic Step	<0:1.1.9-0.1.el7ev
H Encoding Error	<0:1.1.9-0.1.el7ev
M Information Exposure	<0:1.1.7-0.1.el7ev

Vulnerability

Vulnerable Version

Insufficiently Protected Credentials

<0:1.1.9-0.1.el7ev

Untrusted Search Path

<0:1.0.22-1.el7ev

Improper Input Validation

<0:1.0.22-1.el7ev

Information Exposure Through Log Files

<0:1.0.20-0.1.el7ev

Incorrect Privilege Assignment

<0:1.0.16-0.1.el7ev