Known vulnerabilities in cri-tools (Red Hat package)
Vendor:
Red Hat Inc.
Software:
cri-tools (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:cri-tools_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
143
Public exploits:
7
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.28.0-10.el8
1.28.0-10.el9
1.26.0-9.el8
1.26.0-9.el9
1.35.0-4.el9
1.25.0-7.el8
1.25.0-6.el9
1.33.0-4.el9
1.28.0-9.el8
1.28.0-9.el9
1.31.1-7.el8
1.31.1-7.el9
1.29.0-8.el8
1.29.0-8.el9
1.27.0-8.el8
1.27.0-8.el9
1.35.0-3.el9
1.34.0-5.el9
1.32.0-5.el9
1.33.0-3.el9
1.30.0-8.el8
1.30.0-8.el9
1.28.0-8.el8
1.28.0-8.el9
1.29.0-7.el8
1.29.0-7.el9
1.31.1-4.el8
1.31.1-4.el9
1.25.0-6.el8
1.30.0-6.el8
1.30.0-6.el9
1.32.0-2.el9
1.27.0-6.el8
1.27.0-6.el9
1.25.0-5.el8
1.25.0-5.el9
1.26.0-7.el8
1.26.0-7.el9
1.28.0-7.el8
1.28.0-7.el9
1.29.0-6.el8
1.29.0-6.el9
1.30.0-5.el8
1.30.0-5.el9
1.30.0-4.el8
1.30.0-4.el9
1.28.0-6.el8
1.28.0-6.el9
1.26.0-6.el8
1.26.0-6.el9
1.27.0-5.el8
1.27.0-5.el9
1.25.0-4.el8
1.25.0-4.el9
1.29.0-3.1.el8
1.29.0-3.1.el9
1.26.0-4.2.el8
1.26.0-4.3.el9
1.27.0-3.2.el8
1.28.0-3.2.el8
1.28.0-3.2.el9
1.25.0-2.3.el8
1.25.0-2.3.el9
1.26.0-4.1.el8
1.26.0-4.2.el9
1.27.0-3.1.el8
1.27.0-3.1.el9
1.25.0-2.2.el8
1.25.0-2.2.el9
1.28.0-3.1.el8
1.28.0-3.1.el9
1.28.0-3.el9
1.27.0-3.el8
1.27.0-3.el9
1.26.0-4.el8
1.26.0-4.1.el9
1.24.2-7.1.el8
1.25.0-2.1.el8
1.25.0-2.1.el9
1.27.0-2.1.el8
1.27.0-2.1.el9
1.26.0-3.el9
1.26.0-2.el9
1.26.0-1.el9
1.20.0-1.el8
1.18.0-3.el7
1.18.0-3.el8
1.11.1-3.rhaos3.11.gitedabfb5.el7
1.16.1-1.rhaos4.3.el7
1.16.1-1.rhaos4.3.el8
1.25.0-2.el8
1.25.0-2.el9
1.24.2-7.el8
1.24.2-6.el8
1.24.2-4.1.el8
1.23.0-1.1.el7
1.23.0-1.1.el8
1.19.0-7.el8
1.20.0-4.el8
1.21.0-4.el8
1.23.0-1.el7
1.23.0-1.el8
1.22.0-2.el8
1.22.0-1.el8
1.21.0-3.el8
1.21.0-2.el7
1.21.0-2.el8
1.20.0-3.el7
1.20.0-2.el7
1.20.0-2.el8
1.18.0-4.el7
1.18.0-4.el8
1.0.0-3.git8e6013a.el7
1.14.0-3.rhaos4.2.gitb7d3a78.el7
1.14.0-2.rhaos4.2.el8
1.11.1-2.rhaos3.11.gitedabfb5.el7
1.17.0-1.el8
1.17.0-2.el8
1.0.0-6.rhaos3.9.git8e6013a.el7
1.13.0-2.rhaos4.1.gitc06001f.el7
1.13.0-3.rhaos4.1.gitb69a0b9.el8
1.0.0-5.rhaos3.9.git8e6013a.el7
1.0.0-5.rhaos3.10.git2e22a75.el7
1.11.1-1.rhaos3.11.gitedabfb5.el7_5
1.0.0-2.alpha.0.git653cc8c.el7
1.17.0-1.el7
Vulnerabilities (143)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU144181 - Uncontrolled Recursion CVE-2026-33818 |
CWE-674 | Medium | 1.35.0-4.el9 | 18.08.2026 |
SB2026081856 SB2026082658 SB2026082659 and 40 more |
||
| #VU144180 - Uncontrolled Recursion CVE-2026-56859 |
CWE-674 | Medium | 1.35.0-4.el9 | 18.08.2026 |
SB2026081856 SB2026082658 SB2026082659 and 28 more |
||
| #VU144178 - Improper control of a resource through its lifetime CVE-2026-56862 |
CWE-664 | Medium | 1.35.0-4.el9 | 18.08.2026 |
SB2026081856 SB2026082658 SB2026082659 and 42 more |
||
| #VU144177 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-56858 |
CWE-79 | Medium | 1.35.0-4.el9 | 18.08.2026 |
SB2026081856 SB2026082658 SB2026082659 and 34 more |
||
| #VU144174 - Resource exhaustion CVE-2026-56860 |
CWE-400 | Medium | 1.35.0-4.el9 | 18.08.2026 |
SB2026081856 SB2026082658 SB2026082659 and 45 more |
||
| #VU140620 - Resource exhaustion CVE-2026-27145 |
CWE-400 | Medium | 1.31.1-7.el8, 1.31.1-7.el9 | 31.07.2026 |
SB2026073127 SB2026073129 SB2026073130 and 45 more |
||
| #VU140619 - Resource exhaustion CVE-2026-42504 |
CWE-400 | Medium | 1.31.1-7.el8, 1.31.1-7.el9, 1.34.0-5.el9 | 31.07.2026 |
SB2026073127 SB20260731138 SB20260731143 and 12 more |
||
| #VU140615 - Resource exhaustion CVE-2026-42499 |
CWE-400 | Medium | 1.25.0-6.el9, 1.25.0-7.el8, 1.27.0-8.el8, 1.27.0-8.el9, 1.28.0-9.el8, 1.28.0-9.el9, 1.29.0-8.el8, 1.29.0-8.el9, 1.31.1-7.el8, 1.31.1-7.el9 | 31.07.2026 |
SB2026073126 SB2026082630 SB2026082635 and 10 more |
||
| #VU140611 - Double Free CVE-2026-33811 |
CWE-415 | Medium | 1.27.0-8.el8, 1.27.0-8.el9, 1.28.0-9.el8, 1.28.0-9.el9, 1.29.0-8.el8, 1.29.0-8.el9, 1.31.1-7.el8, 1.31.1-7.el9 | 31.07.2026 |
SB2026073126 SB20260731121 SB20260731123 and 14 more |
||
| #VU140608 - Resource exhaustion CVE-2026-39820 |
CWE-400 | Medium | 1.25.0-6.el9, 1.25.0-7.el8, 1.29.0-8.el8, 1.29.0-8.el9, 1.31.1-7.el8, 1.31.1-7.el9 | 31.07.2026 |
SB2026073126 SB2026081985 SB2026082635 and 10 more |
||
| #VU140599 - Resource exhaustion CVE-2026-32280 |
CWE-400 | Medium | 1.25.0-6.el9, 1.25.0-7.el8, 1.27.0-8.el8, 1.27.0-8.el9, 1.28.0-9.el8, 1.28.0-9.el9, 1.29.0-8.el8, 1.29.0-8.el9, 1.31.1-7.el8, 1.31.1-7.el9, 1.32.0-5.el9 | 31.07.2026 |
SB2026073125 SB2026073160 SB2026073161 and 75 more |
||
| #VU136680 - Dependency on Vulnerable Third-Party Component CVE-2026-32283 |
CWE-1395 | Medium | 1.28.0-9.el8, 1.28.0-9.el9 | 02.07.2026 |
SB2026070218 SB2026070239 SB2026070240 and 63 more |
||
| #VU124118 - Improper input validation CVE-2026-25679 |
CWE-20 | Medium | 1.25.0-6.el9, 1.25.0-7.el8, 1.27.0-8.el8, 1.27.0-8.el9, 1.28.0-9.el8, 1.28.0-9.el9, 1.29.0-8.el8, 1.29.0-8.el9, 1.31.1-7.el8, 1.31.1-7.el9 | 19.03.2026 |
SB2026031903 SB2026031904 SB2026031905 and 136 more |
||
| #VU124034 - Resource exhaustion CVE-2025-61726 |
CWE-400 | Medium | 1.30.0-8.el8, 1.30.0-8.el9 | 16.03.2026 |
SB2026031636 SB2026031637 SB2026031638 and 145 more |
||
| #VU124033 - Improper input validation CVE-2025-61728 |
CWE-20 | Medium | 1.33.0-3.el9 | 16.03.2026 |
SB2026031636 SB2026031637 SB2026031638 and 46 more |
||
| #VU123129 - Improper Certificate Validation CVE-2025-68121 |
CWE-295 | High | 1.25.0-6.el9, 1.25.0-7.el8, 1.27.0-8.el8, 1.27.0-8.el9, 1.28.0-9.el8, 1.28.0-9.el9, 1.29.0-8.el8, 1.29.0-8.el9 | 23.02.2026 |
SB2026022333 SB2026030334 SB2026030343 and 118 more |
||
| #VU118105 - UNIX Symbolic Link (Symlink) Following CVE-2025-52881 |
CWE-61 | Low | 1.30.0-8.el8, 1.30.0-8.el9 | 05.11.2025 |
SB2025110519 SB2025110530 SB2025110545 and 62 more |
||
| #VU111945 - Improper Certificate Validation CVE-2025-6032 |
CWE-295 | Medium | 1.30.0-6.el8, 1.30.0-6.el9 | 25.06.2025 |
SB2025062534 SB2025062541 SB2025062542 and 26 more |
||
| #VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2025-22871 |
CWE-444 | Medium | 1.25.0-6.el8, 1.28.0-8.el8, 1.28.0-8.el9, 1.29.0-7.el8, 1.29.0-7.el9, 1.30.0-6.el8, 1.30.0-6.el9, 1.31.1-4.el8, 1.31.1-4.el9, 1.32.0-2.el9 | 05.04.2025 |
SB2025040507 SB2025040508 SB2025040739 and 109 more |
||
| #VU98828 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-9675 |
CWE-22 | Low | 1.26.0-7.el8, 1.26.0-7.el9, 1.27.0-6.el8, 1.27.0-6.el9 | 21.10.2024 |
SB2024102103 SB2024102104 SB2024102107 and 51 more |
Showing elements 1 - 20 out of 143