Known vulnerabilities in cri-o (Red Hat package) - page 3

Software CPE: cpe:2.3:o:red_hat:cri-o_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 295
Public exploits: 18
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting cri-o (Red Hat package) cri-o (Red Hat package) is affected by 295 known vulnerabilities: 25 high, 174 medium, 96 low Critical High Medium Low

Vulnerabilities (295)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU94743 - Resource exhaustion
CVE-2024-37298
CWE-400 Medium
No
No
1.25.3-7.rhaos4.12.git44a2cb2.el9, 1.25.5-25.rhaos4.12.git6556f50.el8, 1.27.8-3.rhaos4.14.git107168f.el8, 1.27.8-3.rhaos4.14.git107168f.el9 25.07.2024 SB2024072523
SB2024072527
SB2024080127
and 13 more
#VU94616 - Information Exposure Through Log Files
CVE-2024-6104
CWE-532 Low
No
No
1.26.5-20.rhaos4.13.git2e90133.el8, 1.26.5-20.rhaos4.13.git2e90133.el9, 1.27.8-3.rhaos4.14.git107168f.el8, 1.27.8-3.rhaos4.14.git107168f.el9, 1.30.5-7.rhaos4.17.git2e89940.el8, 1.30.5-7.rhaos4.17.git2e89940.el9 19.07.2024 SB2024071927
SB2024071929
SB2024071930
and 83 more
#VU91159 - Improper input validation
CVE-2024-24789
CWE-20 Low
No
No
1.30.5-7.rhaos4.17.git2e89940.el8, 1.30.5-7.rhaos4.17.git2e89940.el9 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 78 more
#VU90964 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-5154
CWE-59 High
No
No
1.25.5-21.2.rhaos4.12.gita3eb75f.el8, 1.26.5-18.2.rhaos4.13.git2e90133.el8, 1.26.5-18.2.rhaos4.13.git2e90133.el9, 1.27.7-3.rhaos4.14.git674563e.el8, 1.27.7-3.rhaos4.14.git674563e.el9 04.06.2024 SB2024060401
SB2024061833
SB2024061835
and 5 more
#VU89677 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-34064
CWE-79 Medium
No
No
1.26.5-21.rhaos4.13.git307b1ea.el8, 1.26.5-21.rhaos4.13.git307b1ea.el9, 1.28.8-3.rhaos4.15.gita511a66.el8 20.05.2024 SB2024052067
SB2024052081
SB2024052082
and 83 more
#VU89149 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-34069
CWE-94 Medium
No
No
1.25.5-26.rhaos4.12.git635413a.el8 06.05.2024 SB2024050606
SB2024050723
SB2024050930
and 54 more
#VU88184 - Resource exhaustion
CVE-2023-45288
CWE-400 Medium
Available
No
1.25.3-5.3.rhaos4.12.git44a2cb2.el9, 1.25.5-14.2.rhaos4.12.git4956519.el8, 1.26.5-11.2.rhaos4.13.git919cc6e.el8, 1.26.5-11.2.rhaos4.13.git919cc6e.el9, 1.27.4-7.2.rhaos4.14.git082c52f.el8, 1.27.6-2.rhaos4.14.gitb3bd0bf.el8, 1.27.6-2.rhaos4.14.gitb3bd0bf.el9, 1.28.4-9.1.rhaos4.15.git74214e5.el8, 1.28.4-9.1.rhaos4.15.git74214e5.el9 05.04.2024 SB2024040533
SB2024040549
SB2024040551
and 189 more
#VU87830 - Missing release of memory after effective lifetime
CVE-2024-1394
CWE-401 Medium
No
No
1.25.3-5.2.rhaos4.12.git44a2cb2.el9, 1.25.5-13.1.rhaos4.12.git76343da.el8, 1.26.5-11.1.rhaos4.13.git919cc6e.el8, 1.26.5-11.1.rhaos4.13.git919cc6e.el9, 1.27.4-6.1.rhaos4.14.gitd09e4c0.el8, 1.27.4-6.1.rhaos4.14.gitd09e4c0.el9, 1.27.4-7.2.rhaos4.14.git082c52f.el8, 1.28.4-8.rhaos4.15.git24f50b9.el8, 1.28.4-8.rhaos4.15.git24f50b9.el9, 1.29.5-5.rhaos4.16.git7032128.el8, 1.29.5-5.rhaos4.16.git7032128.el9 26.03.2024 SB2024032646
SB2024032647
SB2024032648
and 54 more
#VU87616 - Improper Privilege Management
CVE-2024-1753
CWE-269 High
No
No
1.26.5-11.2.rhaos4.13.git919cc6e.el8, 1.26.5-11.2.rhaos4.13.git919cc6e.el9, 1.26.5-15.2.rhaos4.13.gitb742e63.el8, 1.26.5-15.2.rhaos4.13.gitb742e63.el9, 1.27.6-2.rhaos4.14.gitb3bd0bf.el8, 1.27.6-2.rhaos4.14.gitb3bd0bf.el9 19.03.2024 SB2024031925
SB2024032051
SB2024032613
and 41 more
#VU87538 - Resource exhaustion
CVE-2024-28180
CWE-400 Medium
No
No
1.25.3-5.2.rhaos4.12.git44a2cb2.el9, 1.25.5-13.1.rhaos4.12.git76343da.el8, 1.26.5-10.rhaos4.13.gita08b329.el8, 1.26.5-10.rhaos4.13.gita08b329.el9, 1.26.5-11.2.rhaos4.13.git919cc6e.el8, 1.26.5-11.2.rhaos4.13.git919cc6e.el9, 1.26.5-15.2.rhaos4.13.gitb742e63.el8, 1.26.5-15.2.rhaos4.13.gitb742e63.el9, 1.27.4-6.1.rhaos4.14.gitd09e4c0.el8, 1.27.4-6.1.rhaos4.14.gitd09e4c0.el9, 1.27.6-2.rhaos4.14.gitb3bd0bf.el8, 1.27.6-2.rhaos4.14.gitb3bd0bf.el9, 1.28.4-8.rhaos4.15.git24f50b9.el8, 1.28.4-8.rhaos4.15.git24f50b9.el9, 1.28.5-2.rhaos4.15.git108c065.el8, 1.28.5-2.rhaos4.15.git108c065.el9, 1.28.6-5.rhaos4.15.gita02fb1e.el8, 1.28.6-5.rhaos4.15.gita02fb1e.el9 14.03.2024 SB2024031446
SB2024031447
SB2024031448
and 106 more
#VU87329 - Resource exhaustion
CVE-2024-28176
CWE-400 Medium
No
No
1.29.5-5.rhaos4.16.git7032128.el8, 1.29.5-5.rhaos4.16.git7032128.el9 11.03.2024 SB2024031123
SB2024031446
SB2024031447
and 37 more
#VU87326 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24786
CWE-835 Medium
No
No
1.25.3-5.2.rhaos4.12.git44a2cb2.el9, 1.25.5-13.1.rhaos4.12.git76343da.el8, 1.26.5-10.rhaos4.13.gita08b329.el8, 1.26.5-10.rhaos4.13.gita08b329.el9, 1.27.4-5.rhaos4.14.git8d40fed.el8, 1.27.4-5.rhaos4.14.git8d40fed.el9, 1.28.4-8.rhaos4.15.git24f50b9.el8, 1.28.4-8.rhaos4.15.git24f50b9.el9, 1.29.5-5.rhaos4.16.git7032128.el8, 1.29.5-5.rhaos4.16.git7032128.el9 11.03.2024 SB2024031115
SB2024031435
SB2024031555
and 134 more
#VU87201 - Improper input validation
CVE-2024-24784
CWE-20 Medium
No
No
1.29.5-5.rhaos4.16.git7032128.el8, 1.29.5-5.rhaos4.16.git7032128.el9 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 48 more
#VU87200 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-24785
CWE-79 Low
No
No
1.29.5-5.rhaos4.16.git7032128.el8, 1.29.5-5.rhaos4.16.git7032128.el9 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 61 more
#VU87198 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45289
CWE-200 Low
No
No
1.29.5-5.rhaos4.16.git7032128.el8, 1.29.5-5.rhaos4.16.git7032128.el9 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 54 more
#VU87197 - Resource exhaustion
CVE-2023-45290
CWE-400 Medium
No
No
1.25.3-7.rhaos4.12.git44a2cb2.el9, 1.25.5-25.rhaos4.12.git6556f50.el8, 1.25.5-26.rhaos4.12.git635413a.el8, 1.26.5-20.rhaos4.13.git2e90133.el8, 1.26.5-20.rhaos4.13.git2e90133.el9, 1.27.8-5.rhaos4.14.git107168f.el8, 1.27.8-5.rhaos4.14.git107168f.el9, 1.28.9-5.rhaos4.15.git674ed4c.el8, 1.28.9-5.rhaos4.15.git674ed4c.el9, 1.29.5-5.rhaos4.16.git7032128.el8, 1.29.5-5.rhaos4.16.git7032128.el9 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 101 more
#VU87196 - Error Handling
CVE-2024-24783
CWE-388 Medium
No
No
1.29.5-5.rhaos4.16.git7032128.el8, 1.29.5-5.rhaos4.16.git7032128.el9 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 81 more
#VU86795 - Improper input validation
CVE-2023-29483
CWE-20 Medium
No
No
1.29.5-5.rhaos4.16.git7032128.el8, 1.29.5-5.rhaos4.16.git7032128.el9 26.02.2024 SB2024022638
SB2024040115
SB2024042448
and 37 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795
CWE-326 Low
Available
No
1.27.7-4.rhaos4.14.gitceaac6e.el8, 1.27.7-4.rhaos4.14.gitceaac6e.el9, 1.28.3-14.rhaos4.15.git33aabd8.el9 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 344 more
#VU83902 - Improper input validation
CVE-2023-45539
CWE-20 Medium
No
No
1.27.8-6.rhaos4.14.git06fccaa.el8, 1.27.8-6.rhaos4.14.git06fccaa.el9 06.12.2023 SB2023082120
SB2023120617
SB2023120620
and 21 more


Showing elements 41 - 60 out of 295