Known vulnerabilities in cri-o (Red Hat package) - page 3

Software CPE: cpe:2.3:o:red_hat:cri-o_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 289
Public exploits: 18
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting cri-o (Red Hat package) cri-o (Red Hat package) is affected by 289 known vulnerabilities: 25 high, 168 medium, 96 low Critical High Medium Low

Vulnerabilities (289)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU90964 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-5154
CWE-59 High
No
No
1.25.5-21.2.rhaos4.12.gita3eb75f.el8, 1.26.5-18.2.rhaos4.13.git2e90133.el8, 1.26.5-18.2.rhaos4.13.git2e90133.el9, 1.27.7-3.rhaos4.14.git674563e.el8, 1.27.7-3.rhaos4.14.git674563e.el9 04.06.2024 SB2024060401
SB2024061833
SB2024061835
and 5 more
#VU89685 - Improper Validation of Integrity Check Value
CVE-2024-3727
CWE-354 Medium
No
No
1.26.5-23.rhaos4.13.git6d9c688.el8, 1.26.5-23.rhaos4.13.git6d9c688.el9, 1.27.8-8.rhaos4.14.git17cbe6d.el8, 1.27.8-8.rhaos4.14.git17cbe6d.el9, 1.28.10-5.rhaos4.15.git7a788e6.el8, 1.28.10-5.rhaos4.15.git7a788e6.el9, 1.29.5-5.rhaos4.16.git7032128.el8, 1.29.5-5.rhaos4.16.git7032128.el9, 1.29.5-7.rhaos4.16.git7db4ada.el8, 1.29.5-7.rhaos4.16.git7db4ada.el9 21.05.2024 SB2024052112
SB2024052116
SB2024052117
and 68 more
#VU89067 - Command injection
CVE-2024-3154
CWE-77 Low
No
No
1.27.6-2.rhaos4.14.gitb3bd0bf.el8, 1.27.6-2.rhaos4.14.gitb3bd0bf.el9 30.04.2024 SB2024043041
SB2024060437
SB2024060441
and 8 more
#VU88184 - Resource exhaustion
CVE-2023-45288
CWE-400 Medium
Available
No
1.25.3-5.3.rhaos4.12.git44a2cb2.el9, 1.25.5-14.2.rhaos4.12.git4956519.el8, 1.26.5-11.2.rhaos4.13.git919cc6e.el8, 1.26.5-11.2.rhaos4.13.git919cc6e.el9, 1.27.4-7.2.rhaos4.14.git082c52f.el8, 1.27.6-2.rhaos4.14.gitb3bd0bf.el8, 1.27.6-2.rhaos4.14.gitb3bd0bf.el9, 1.28.4-9.1.rhaos4.15.git74214e5.el8, 1.28.4-9.1.rhaos4.15.git74214e5.el9 05.04.2024 SB2024040533
SB2024040549
SB2024040551
and 189 more
#VU87830 - Missing release of memory after effective lifetime
CVE-2024-1394
CWE-401 Medium
No
No
1.25.3-5.2.rhaos4.12.git44a2cb2.el9, 1.25.5-13.1.rhaos4.12.git76343da.el8, 1.26.5-11.1.rhaos4.13.git919cc6e.el8, 1.26.5-11.1.rhaos4.13.git919cc6e.el9, 1.27.4-6.1.rhaos4.14.gitd09e4c0.el8, 1.27.4-6.1.rhaos4.14.gitd09e4c0.el9, 1.27.4-7.2.rhaos4.14.git082c52f.el8, 1.28.4-8.rhaos4.15.git24f50b9.el8, 1.28.4-8.rhaos4.15.git24f50b9.el9, 1.29.5-5.rhaos4.16.git7032128.el8, 1.29.5-5.rhaos4.16.git7032128.el9 26.03.2024 SB2024032646
SB2024032647
SB2024032648
and 54 more
#VU87616 - Improper Privilege Management
CVE-2024-1753
CWE-269 High
No
No
1.26.5-11.2.rhaos4.13.git919cc6e.el8, 1.26.5-11.2.rhaos4.13.git919cc6e.el9, 1.26.5-15.2.rhaos4.13.gitb742e63.el8, 1.26.5-15.2.rhaos4.13.gitb742e63.el9, 1.27.6-2.rhaos4.14.gitb3bd0bf.el8, 1.27.6-2.rhaos4.14.gitb3bd0bf.el9 19.03.2024 SB2024031925
SB2024032051
SB2024032613
and 41 more
#VU87538 - Resource exhaustion
CVE-2024-28180
CWE-400 Medium
No
No
1.25.3-5.2.rhaos4.12.git44a2cb2.el9, 1.25.5-13.1.rhaos4.12.git76343da.el8, 1.26.5-10.rhaos4.13.gita08b329.el8, 1.26.5-10.rhaos4.13.gita08b329.el9, 1.26.5-11.2.rhaos4.13.git919cc6e.el8, 1.26.5-11.2.rhaos4.13.git919cc6e.el9, 1.26.5-15.2.rhaos4.13.gitb742e63.el8, 1.26.5-15.2.rhaos4.13.gitb742e63.el9, 1.27.4-6.1.rhaos4.14.gitd09e4c0.el8, 1.27.4-6.1.rhaos4.14.gitd09e4c0.el9, 1.27.6-2.rhaos4.14.gitb3bd0bf.el8, 1.27.6-2.rhaos4.14.gitb3bd0bf.el9, 1.28.4-8.rhaos4.15.git24f50b9.el8, 1.28.4-8.rhaos4.15.git24f50b9.el9, 1.28.5-2.rhaos4.15.git108c065.el8, 1.28.5-2.rhaos4.15.git108c065.el9, 1.28.6-5.rhaos4.15.gita02fb1e.el8, 1.28.6-5.rhaos4.15.gita02fb1e.el9 14.03.2024 SB2024031446
SB2024031447
SB2024031448
and 106 more
#VU87329 - Resource exhaustion
CVE-2024-28176
CWE-400 Medium
No
No
1.29.5-5.rhaos4.16.git7032128.el8, 1.29.5-5.rhaos4.16.git7032128.el9 11.03.2024 SB2024031123
SB2024031446
SB2024031447
and 37 more
#VU87326 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24786
CWE-835 Medium
No
No
1.25.3-5.2.rhaos4.12.git44a2cb2.el9, 1.25.5-13.1.rhaos4.12.git76343da.el8, 1.26.5-10.rhaos4.13.gita08b329.el8, 1.26.5-10.rhaos4.13.gita08b329.el9, 1.27.4-5.rhaos4.14.git8d40fed.el8, 1.27.4-5.rhaos4.14.git8d40fed.el9, 1.28.4-8.rhaos4.15.git24f50b9.el8, 1.28.4-8.rhaos4.15.git24f50b9.el9, 1.29.5-5.rhaos4.16.git7032128.el8, 1.29.5-5.rhaos4.16.git7032128.el9 11.03.2024 SB2024031115
SB2024031435
SB2024031555
and 134 more
#VU87201 - Improper input validation
CVE-2024-24784
CWE-20 Medium
No
No
1.29.5-5.rhaos4.16.git7032128.el8, 1.29.5-5.rhaos4.16.git7032128.el9 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 48 more
#VU87200 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-24785
CWE-79 Low
No
No
1.29.5-5.rhaos4.16.git7032128.el8, 1.29.5-5.rhaos4.16.git7032128.el9 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 61 more
#VU87198 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45289
CWE-200 Low
No
No
1.29.5-5.rhaos4.16.git7032128.el8, 1.29.5-5.rhaos4.16.git7032128.el9 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 54 more
#VU87196 - Error Handling
CVE-2024-24783
CWE-388 Medium
No
No
1.29.5-5.rhaos4.16.git7032128.el8, 1.29.5-5.rhaos4.16.git7032128.el9 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 81 more
#VU86795 - Improper input validation
CVE-2023-29483
CWE-20 Medium
No
No
1.29.5-5.rhaos4.16.git7032128.el8, 1.29.5-5.rhaos4.16.git7032128.el9 26.02.2024 SB2024022638
SB2024040115
SB2024042448
and 37 more
#VU86309 - Observable discrepancy
CVE-2023-45287
CWE-203 Medium
No
No
1.28.3-14.rhaos4.15.git33aabd8.el9 09.02.2024 SB2024020943
SB2024020944
SB2024021315
and 37 more
#VU85991 - Security Features
CVE-2024-21626
CWE-254 High
Available
No
1.24.6-11.1.rhaos4.11.git07f48d1.el8, 1.25.5-7.rhaos4.12.gitaeeaedb.el8, 1.28.3-14.rhaos4.15.git33aabd8.el9 01.02.2024 SB2024020112
SB2024020113
SB2024020123
and 78 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795
CWE-326 Low
Available
No
1.27.7-4.rhaos4.14.gitceaac6e.el8, 1.27.7-4.rhaos4.14.gitceaac6e.el9, 1.28.3-14.rhaos4.15.git33aabd8.el9 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU84507 - Resource exhaustion
CVE-2023-47108
CWE-400 Medium
No
No
1.25.5-6.rhaos4.12.gitfcf6ef3.el8, 1.26.4-9.1.rhaos4.13.gite26e057.el8, 1.26.4-9.1.rhaos4.13.gite26e057.el9, 1.27.2-7.rhaos4.14.git1cc7a64.el8, 1.27.2-7.rhaos4.14.git1cc7a64.el9, 1.28.3-14.rhaos4.15.git33aabd8.el9 18.12.2023 SB2023121825
SB2023122137
SB2024010436
and 55 more
#VU83928 - Resource exhaustion
CVE-2023-39326
CWE-400 Medium
No
No
1.28.3-14.rhaos4.15.git33aabd8.el9 06.12.2023 SB2023120641
SB2023121133
SB2023121156
and 90 more
#VU72686 - Resource exhaustion
CVE-2022-41723
CWE-400 Medium
No
No
1.26.3-3.rhaos4.13.git641290e.el9, 1.26.5-6.rhaos4.13.gitd0a27f5.el8, 1.26.5-6.rhaos4.13.gitd0a27f5.el9 01.03.2023 SB2023030130
SB2023030131
SB2023030946
and 190 more


Showing elements 41 - 60 out of 289