Known vulnerabilities in cri-o (Red Hat package) - page 8

Software CPE: cpe:2.3:o:red_hat:cri-o_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 289
Public exploits: 18
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting cri-o (Red Hat package) cri-o (Red Hat package) is affected by 289 known vulnerabilities: 25 high, 168 medium, 96 low Critical High Medium Low

Vulnerabilities (289)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68299 - Incorrect Permission Assignment for Critical Resource
CVE-2022-0532
CWE-732 Medium
No
No
1.21.5-2.rhaos4.8.gitaf64931.el7, 1.21.5-2.rhaos4.8.gitaf64931.el8, 1.22.2-2.rhaos4.9.gitb030be8.el7, 1.22.2-2.rhaos4.9.gitb030be8.el8, 1.23.0-92.rhaos4.10.gitdaab4d1.el7, 1.23.1-9.rhaos4.10.gitbdffb9a.el8 13.10.2022 SB2022101333
SB2022101334
SB2022101335
and 4 more
#VU67665 - Resource exhaustion
CVE-2022-25857
CWE-400 Medium
No
No
1.23.5-5.rhaos4.10.gitd9dec98.el7, 1.23.5-5.rhaos4.10.gitd9dec98.el8 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 83 more
#VU67396 - Improper input validation
CVE-2022-27664
CWE-20 Medium
No
No
1.24.3-6.rhaos4.11.gitc4567c0.el8, 1.24.4-5.rhaos4.11.git57d7127.el8, 1.25.4-4.rhaos4.12.gitb9319a2.el8, 1.27.1-8.1.rhaos4.14.git3fecb83.el8, 1.27.1-8.1.rhaos4.14.git3fecb83.el9 15.09.2022 SB2022091520
SB2022091521
SB2022092144
and 127 more
#VU66122 - Use of Insufficiently Random Values
CVE-2022-30629
CWE-330 Medium
No
No
1.24.2-4.rhaos4.11.gitd6283df.el8, 1.24.6-2.rhaos4.11.git4bfe15a.el8 05.08.2022 SB2022080501
SB2022080503
SB2022081106
and 81 more
#VU66121 - Improper input validation
CVE-2022-32189
CWE-20 Medium
No
No
1.24.3-6.rhaos4.11.gitc4567c0.el8 04.08.2022 SB2022080502
SB2022080503
SB2022080511
and 81 more
#VU66066 - Security Features
CVE-2022-32148
CWE-254 Medium
No
No
1.24.3-6.rhaos4.11.gitc4567c0.el8 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66064 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-1705
CWE-444 Medium
No
No
1.24.3-6.rhaos4.11.gitc4567c0.el8 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU64608 - Improper input validation
CVE-2022-34177
CWE-20 Medium
No
No
1.22.5-16.rhaos4.9.git88e9cdc.el7, 1.22.5-16.rhaos4.9.git88e9cdc.el8, 1.23.3-17.rhaos4.10.git016b1ca.el7, 1.23.3-17.rhaos4.10.git016b1ca.el8 23.06.2022 SB2022062315
SB2022092149
SB2023010903
and 2 more
#VU64269 - Integer overflow
CVE-2022-28327
CWE-190 Low
No
No
1.23.3-13.rhaos4.10.git6af791c.1.el7, 1.23.3-14.rhaos4.10.git6af791c.1.el8, 1.24.1-11.rhaos4.11.gitb0d2ef3.el8, 1.24.6-2.rhaos4.11.git4bfe15a.el8 14.06.2022 SB2022041004
SB2022061422
SB2022061506
and 90 more
#VU64266 - Buffer overflow
CVE-2022-24675
CWE-120 Low
No
No
1.23.3-11.rhaos4.10.gitddf4b1a.1.el7, 1.23.3-11.rhaos4.10.gitddf4b1a.1.el8, 1.23.3-13.rhaos4.10.git6af791c.1.el7, 1.23.3-14.rhaos4.10.git6af791c.1.el8, 1.24.1-11.rhaos4.11.gitb0d2ef3.el8, 1.24.6-2.rhaos4.11.git4bfe15a.el8 14.06.2022 SB2022041004
SB2022061422
SB2022061511
and 88 more
#VU63493 - Improper Access Control
CVE-2022-1706
CWE-284 Low
No
No
1.24.1-11.rhaos4.11.gitb0d2ef3.el8 20.05.2022 SB2022052015
SB2022071162
SB2022071163
and 9 more
#VU63377 - Improper Access Control
CVE-2022-30954
CWE-284 Low
No
No
1.23.5-5.rhaos4.10.gitd9dec98.el7, 1.23.5-5.rhaos4.10.gitd9dec98.el8 18.05.2022 SB2022051814
SB2023011328
SB2023020889
and 5 more
#VU63375 - Cross-Site Request Forgery (CSRF)
CVE-2022-30953
CWE-352 Low
No
No
1.23.5-5.rhaos4.10.gitd9dec98.el7, 1.23.5-5.rhaos4.10.gitd9dec98.el8 18.05.2022 SB2022051814
SB2023011328
SB2023020889
and 5 more
#VU63372 - Exposure of sensitive information to an unauthorized actor
CVE-2022-30952
CWE-200 Medium
No
No
1.23.5-5.rhaos4.10.gitd9dec98.el7, 1.23.5-5.rhaos4.10.gitd9dec98.el8 18.05.2022 SB2022051813
SB2023011328
SB2023020889
and 3 more
#VU63359 - Cross-Site Request Forgery (CSRF)
CVE-2022-30946
CWE-352 Low
No
No
1.23.5-5.rhaos4.10.gitd9dec98.el7, 1.23.5-5.rhaos4.10.gitd9dec98.el8 18.05.2022 SB2022051808
SB2023011328
SB2023020889
and 4 more
#VU62608 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-29599
CWE-78 High
No
No
1.23.4-3.rhaos4.10.git8240333.el7, 1.23.4-3.rhaos4.10.git8240333.el8 26.04.2022 SB2022042627
SB2022042724
SB2022050234
and 29 more
#VU62039 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-27191
CWE-327 Medium
No
No
1.24.1-11.rhaos4.11.gitb0d2ef3.el8 10.04.2022 SB2022041004
SB2022041406
SB2022081226
and 91 more
#VU62037 - Incorrect Authorization
CVE-2022-23773
CWE-863 Low
Available
No
1.23.3-13.rhaos4.10.git6af791c.1.el7, 1.23.3-14.rhaos4.10.git6af791c.1.el8, 1.24.1-11.rhaos4.11.gitb0d2ef3.el8 10.04.2022 SB2022041002
SB2022060126
SB2022060127
and 39 more
#VU62036 - Unchecked Return Value
CVE-2022-23806
CWE-252 Medium
No
No
1.23.3-13.rhaos4.10.git6af791c.1.el7, 1.23.3-14.rhaos4.10.git6af791c.1.el8, 1.24.1-11.rhaos4.11.gitb0d2ef3.el8 10.04.2022 SB2022041002
SB2022041003
SB2022060126
and 46 more
#VU61599 - Improper input validation
CVE-2022-21698
CWE-20 Medium
No
No
1.24.1-11.rhaos4.11.gitb0d2ef3.el8 24.03.2022 SB2022021530
SB2022032413
SB2022040807
and 110 more


Showing elements 141 - 160 out of 289