Known vulnerabilities in cri-o (Red Hat package) - page 5

Software CPE: cpe:2.3:o:red_hat:cri-o_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 289
Public exploits: 18
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting cri-o (Red Hat package) cri-o (Red Hat package) is affected by 289 known vulnerabilities: 25 high, 168 medium, 96 low Critical High Medium Low

Vulnerabilities (289)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78005 - Inadequate Encryption Strength
CVE-2023-3089
CWE-326 Medium
No
No
1.24.6-2.rhaos4.11.git4bfe15a.el8, 1.26.3-10.rhaos4.13.git78941bf.el8, 1.26.3-11.rhaos4.13.git78941bf.el9, 1.27.1-8.1.rhaos4.14.git3fecb83.el8, 1.27.1-8.1.rhaos4.14.git3fecb83.el9 06.07.2023 SB2023070602
SB2023070603
SB2023070604
and 34 more
#VU76236 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-32981
CWE-22 Medium
No
No
1.23.5-16.rhaos4.10.gitbb2cc9a.el7, 1.23.5-16.rhaos4.10.gitbb2cc9a.el8 17.05.2023 SB2023051751
SB2023061545
SB2023061946
and 1 more
#VU76234 - Cross-Site Request Forgery (CSRF)
CVE-2023-32980
CWE-352 Low
No
No
1.23.5-16.rhaos4.10.gitbb2cc9a.el7, 1.23.5-16.rhaos4.10.gitbb2cc9a.el8 17.05.2023 SB2023051750
SB2023062636
#VU76232 - Exposure of sensitive information to an unauthorized actor
CVE-2023-32979
CWE-200 Low
No
No
1.23.5-16.rhaos4.10.gitbb2cc9a.el7, 1.23.5-16.rhaos4.10.gitbb2cc9a.el8 17.05.2023 SB2023051750
SB2023062636
#VU76230 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-32977
CWE-79 Low
No
No
1.23.5-16.rhaos4.10.gitbb2cc9a.el7, 1.23.5-16.rhaos4.10.gitbb2cc9a.el8 17.05.2023 SB2023051727
SB2023061545
SB2023061946
and 1 more
#VU75791 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-24540
CWE-94 Medium
No
No
1.24.6-2.rhaos4.11.git4bfe15a.el8, 1.26.3-9.rhaos4.13.git994242a.el8, 1.26.3-10.rhaos4.13.git994242a.el9 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 81 more
#VU75664 - Exposure of sensitive information to an unauthorized actor
CVE-2023-30861
CWE-200 Medium
No
No
1.26.3-8.rhaos4.13.git9232b13.el8, 1.26.3-9.rhaos4.13.git9232b13.el9 02.05.2023 SB2023050221
SB2023052227
SB2023052228
and 44 more
#VU75561 - Improper input validation
CVE-2023-20860
CWE-20 Medium
No
No
1.23.5-16.rhaos4.10.gitbb2cc9a.el7, 1.23.5-16.rhaos4.10.gitbb2cc9a.el8 27.04.2023 SB2023042742
SB2023042746
SB2023050518
and 34 more
#VU74574 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-24538
CWE-94 High
No
No
1.26.3-9.rhaos4.13.git994242a.el8, 1.26.3-10.rhaos4.13.git78941bf.el8, 1.26.3-10.rhaos4.13.git994242a.el9, 1.26.3-11.rhaos4.13.git78941bf.el9 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 85 more
#VU74573 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-24537
CWE-835 Medium
No
No
1.26.3-9.rhaos4.13.git994242a.el8, 1.26.3-10.rhaos4.13.git78941bf.el8, 1.26.3-10.rhaos4.13.git994242a.el9, 1.26.3-11.rhaos4.13.git78941bf.el9 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 87 more
#VU74572 - Resource Management Errors
CVE-2023-24536
CWE-399 Medium
No
No
1.26.3-9.rhaos4.13.git994242a.el8, 1.26.3-10.rhaos4.13.git78941bf.el8, 1.26.3-10.rhaos4.13.git994242a.el9, 1.26.3-11.rhaos4.13.git78941bf.el9 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 80 more
#VU74571 - Resource exhaustion
CVE-2023-24534
CWE-400 Medium
No
No
1.26.3-9.rhaos4.13.git994242a.el8, 1.26.3-10.rhaos4.13.git78941bf.el8, 1.26.3-10.rhaos4.13.git994242a.el9, 1.26.3-11.rhaos4.13.git78941bf.el9 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 85 more
#VU74190 - Improper Access Control
CVE-2023-27561
CWE-284 Low
No
No
1.26.3-9.rhaos4.13.git994242a.el8, 1.26.3-10.rhaos4.13.git78941bf.el8, 1.26.3-10.rhaos4.13.git994242a.el9, 1.26.3-11.rhaos4.13.git78941bf.el9 30.03.2023 SB2023033025
SB2023040327
SB2023042614
and 40 more
#VU73722 - Resource exhaustion
CVE-2022-41725
CWE-400 Medium
No
No
1.26.3-3.rhaos4.13.git641290e.el9, 1.26.3-9.rhaos4.13.git994242a.el8, 1.26.3-10.rhaos4.13.git994242a.el9 15.03.2023 SB2023030130
SB2023031537
SB2023031538
and 80 more
#VU72685 - Resource Management Errors
CVE-2022-41724
CWE-399 Medium
No
No
1.26.3-3.rhaos4.13.git641290e.el9, 1.26.3-9.rhaos4.13.git994242a.el8, 1.26.3-10.rhaos4.13.git994242a.el9 01.03.2023 SB2023030130
SB2023030131
SB2023030211
and 87 more
#VU70527 - Improper input validation
CVE-2022-41966
CWE-20 Medium
Available
No
1.23.5-16.rhaos4.10.gitbb2cc9a.el7, 1.23.5-16.rhaos4.10.gitbb2cc9a.el8 28.12.2022 SB2022122822
SB2023011211
SB2023020616
and 53 more
#VU70334 - Allocation of Resources Without Limits or Throttling
CVE-2022-41717
CWE-770 Medium
Available
No
1.24.6-2.rhaos4.11.git4bfe15a.el8, 1.26.3-3.rhaos4.13.git641290e.el9, 1.26.3-9.rhaos4.13.git994242a.el8, 1.26.3-10.rhaos4.13.git994242a.el9 14.12.2022 SB2022121432
SB2022121433
SB2022121435
and 185 more
#VU66817 - Improper Access Control
CVE-2022-2995
CWE-284 Low
No
No
1.23.5-11.rhaos4.10.gitfc32aac.el7, 1.23.5-11.rhaos4.10.gitfc32aac.el8, 1.24.5-5.rhaos4.11.git8bf967b.el8 30.08.2022 SB2022083001
SB2023011939
SB2023020908
and 11 more
#VU62038 - Resource exhaustion
CVE-2022-23772
CWE-400 Medium
No
No
1.24.1-11.rhaos4.11.gitb0d2ef3.el8, 1.24.6-2.rhaos4.11.git4bfe15a.el8, 1.27.8-6.rhaos4.14.git06fccaa.el8, 1.27.8-6.rhaos4.14.git06fccaa.el9 10.04.2022 SB2022041002
SB2022060126
SB2022060127
and 40 more
#VU25847 - Improper Access Control
CVE-2019-19921
CWE-284 Low
No
No
1.26.3-9.rhaos4.13.git994242a.el8, 1.26.3-10.rhaos4.13.git78941bf.el8, 1.26.3-10.rhaos4.13.git994242a.el9, 1.26.3-11.rhaos4.13.git78941bf.el9 10.03.2020 SB2020021224
SB2020031004
SB2020031116
and 35 more


Showing elements 81 - 100 out of 289