Known vulnerabilities in cri-o (Red Hat package) - page 5

Software CPE: cpe:2.3:o:red_hat:cri-o_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 295
Public exploits: 18
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting cri-o (Red Hat package) cri-o (Red Hat package) is affected by 295 known vulnerabilities: 25 high, 174 medium, 96 low Critical High Medium Low

Vulnerabilities (295)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU81426 - Resource exhaustion
CVE-2023-37788
CWE-400 Medium
No
No
1.27.1-8.1.rhaos4.14.git3fecb83.el8, 1.27.1-8.1.rhaos4.14.git3fecb83.el9 03.10.2023 SB2023100334
SB2023100335
SB2023100512
and 11 more
#VU79294 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-3978
CWE-79 Low
No
No
1.27.1-8.1.rhaos4.14.git3fecb83.el8, 1.27.1-8.1.rhaos4.14.git3fecb83.el9 09.08.2023 SB2023080938
SB2023081013
SB20230821167
and 54 more
#VU78481 - Permissions, Privileges, and Access Controls
CVE-2023-1260
CWE-264 Low
No
No
1.24.6-4.rhaos4.11.git4bfe15a.el8, 1.26.3-10.rhaos4.13.git78941bf.el8, 1.26.3-11.rhaos4.13.git78941bf.el9 21.07.2023 SB2023072111
SB2023072112
SB2023072113
and 6 more
#VU78290 - Use After Free
CVE-2023-29824
CWE-416 Low
No
No
1.27.1-8.1.rhaos4.14.git3fecb83.el8, 1.27.1-8.1.rhaos4.14.git3fecb83.el9 16.07.2023 SB2023071614
SB2023071617
SB2023072554
and 6 more
#VU76236 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-32981
CWE-22 Medium
No
No
1.23.5-16.rhaos4.10.gitbb2cc9a.el7, 1.23.5-16.rhaos4.10.gitbb2cc9a.el8 17.05.2023 SB2023051751
SB2023061545
SB2023061946
and 1 more
#VU76234 - Cross-Site Request Forgery (CSRF)
CVE-2023-32980
CWE-352 Low
No
No
1.23.5-16.rhaos4.10.gitbb2cc9a.el7, 1.23.5-16.rhaos4.10.gitbb2cc9a.el8 17.05.2023 SB2023051750
SB2023062636
#VU76232 - Exposure of sensitive information to an unauthorized actor
CVE-2023-32979
CWE-200 Low
No
No
1.23.5-16.rhaos4.10.gitbb2cc9a.el7, 1.23.5-16.rhaos4.10.gitbb2cc9a.el8 17.05.2023 SB2023051750
SB2023062636
#VU76230 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-32977
CWE-79 Low
No
No
1.23.5-16.rhaos4.10.gitbb2cc9a.el7, 1.23.5-16.rhaos4.10.gitbb2cc9a.el8 17.05.2023 SB2023051727
SB2023061545
SB2023061946
and 1 more
#VU75792 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-29400
CWE-79 Medium
No
No
1.26.3-10.rhaos4.13.git78941bf.el8, 1.26.3-11.rhaos4.13.git78941bf.el9 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 74 more
#VU75791 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-24540
CWE-94 Medium
No
No
1.24.6-2.rhaos4.11.git4bfe15a.el8, 1.26.3-9.rhaos4.13.git994242a.el8, 1.26.3-10.rhaos4.13.git994242a.el9 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 81 more
#VU75790 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-24539
CWE-79 Medium
No
No
1.26.3-10.rhaos4.13.git78941bf.el8, 1.26.3-11.rhaos4.13.git78941bf.el9 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 75 more
#VU75561 - Improper input validation
CVE-2023-20860
CWE-20 Medium
No
No
1.23.5-16.rhaos4.10.gitbb2cc9a.el7, 1.23.5-16.rhaos4.10.gitbb2cc9a.el8 27.04.2023 SB2023042742
SB2023042746
SB2023050518
and 34 more
#VU74574 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-24538
CWE-94 High
No
No
1.26.3-9.rhaos4.13.git994242a.el8, 1.26.3-10.rhaos4.13.git78941bf.el8, 1.26.3-10.rhaos4.13.git994242a.el9, 1.26.3-11.rhaos4.13.git78941bf.el9 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 85 more
#VU74573 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-24537
CWE-835 Medium
No
No
1.26.3-9.rhaos4.13.git994242a.el8, 1.26.3-10.rhaos4.13.git78941bf.el8, 1.26.3-10.rhaos4.13.git994242a.el9, 1.26.3-11.rhaos4.13.git78941bf.el9 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 87 more
#VU74572 - Resource Management Errors
CVE-2023-24536
CWE-399 Medium
No
No
1.26.3-9.rhaos4.13.git994242a.el8, 1.26.3-10.rhaos4.13.git78941bf.el8, 1.26.3-10.rhaos4.13.git994242a.el9, 1.26.3-11.rhaos4.13.git78941bf.el9 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 80 more
#VU74571 - Resource exhaustion
CVE-2023-24534
CWE-400 Medium
No
No
1.26.3-9.rhaos4.13.git994242a.el8, 1.26.3-10.rhaos4.13.git78941bf.el8, 1.26.3-10.rhaos4.13.git994242a.el9, 1.26.3-11.rhaos4.13.git78941bf.el9 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 85 more
#VU74190 - Improper Access Control
CVE-2023-27561
CWE-284 Low
No
No
1.26.3-9.rhaos4.13.git994242a.el8, 1.26.3-10.rhaos4.13.git78941bf.el8, 1.26.3-10.rhaos4.13.git994242a.el9, 1.26.3-11.rhaos4.13.git78941bf.el9 30.03.2023 SB2023033025
SB2023040327
SB2023042614
and 40 more
#VU70527 - Improper input validation
CVE-2022-41966
CWE-20 Medium
Available
No
1.23.5-16.rhaos4.10.gitbb2cc9a.el7, 1.23.5-16.rhaos4.10.gitbb2cc9a.el8 28.12.2022 SB2022122822
SB2023011211
SB2023020616
and 53 more
#VU66122 - Use of Insufficiently Random Values
CVE-2022-30629
CWE-330 Medium
No
No
1.24.2-4.rhaos4.11.gitd6283df.el8, 1.24.6-2.rhaos4.11.git4bfe15a.el8 05.08.2022 SB2022080501
SB2022080503
SB2022081106
and 81 more
#VU25847 - Improper Access Control
CVE-2019-19921
CWE-284 Low
No
No
1.26.3-9.rhaos4.13.git994242a.el8, 1.26.3-10.rhaos4.13.git78941bf.el8, 1.26.3-10.rhaos4.13.git994242a.el9, 1.26.3-11.rhaos4.13.git78941bf.el9 10.03.2020 SB2020021224
SB2020031004
SB2020031116
and 35 more


Showing elements 81 - 100 out of 295