Known vulnerabilities in cri-tools (Red Hat package) - page 5

Vendor: Red Hat Inc.

Software: cri-tools (Red Hat package)

Software CPE: cpe:2.3:o:red_hat:cri-tools_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 143

Public exploits: 7

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (143)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU68299 - Incorrect Permission Assignment for Critical Resource CVE-2022-0532	CWE-732	Medium	No	No	1.23.0-1.el7, 1.23.0-1.el8	13.10.2022	SB2022101333 SB2022101334 SB2022101335 and 4 more
#VU66122 - Use of Insufficiently Random Values CVE-2022-30629	CWE-330	Medium	No	No	1.24.2-6.el8	05.08.2022	SB2022080501 SB2022080503 SB2022081106 and 81 more
#VU64269 - Integer overflow CVE-2022-28327	CWE-190	Low	No	No	1.24.2-4.1.el8	14.06.2022	SB2022041004 SB2022061422 SB2022061506 and 90 more
#VU64266 - Buffer overflow CVE-2022-24675	CWE-120	Low	No	No	1.23.0-1.1.el7, 1.23.0-1.1.el8, 1.24.2-4.1.el8	14.06.2022	SB2022041004 SB2022061422 SB2022061511 and 88 more
#VU64008 - Resource exhaustion CVE-2022-1708	CWE-400	Medium	No	No	1.19.0-7.el8, 1.20.0-4.el8	07.06.2022	SB2022060707 SB2022061334 SB2022061627 and 15 more
#VU63493 - Improper Access Control CVE-2022-1706	CWE-284	Low	No	No	1.24.2-4.1.el8	20.05.2022	SB2022052015 SB2022071162 SB2022071163 and 9 more
#VU63090 - Permissions, Privileges, and Access Controls CVE-2022-29162	CWE-264	Medium	No	No	1.24.2-4.1.el8	12.05.2022	SB2022051205 SB2022062435 SB2022071158 and 32 more
#VU62304 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-29046	CWE-79	Low	No	No	1.19.0-7.el8	13.04.2022	SB2022041333 SB2022053122 SB2022061218 and 3 more
#VU62292 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-29036	CWE-79	Low	No	No	1.19.0-7.el8	13.04.2022	SB2022041321 SB2022053122 SB2022061218 and 2 more
#VU62039 - Use of a Broken or Risky Cryptographic Algorithm CVE-2022-27191	CWE-327	Medium	No	No	1.24.2-4.1.el8	10.04.2022	SB2022041004 SB2022041406 SB2022081226 and 91 more
#VU62038 - Resource exhaustion CVE-2022-23772	CWE-400	Medium	No	No	1.24.2-4.1.el8	10.04.2022	SB2022041002 SB2022060126 SB2022060127 and 40 more
#VU62037 - Incorrect Authorization CVE-2022-23773	CWE-863	Low	Available	No	1.24.2-4.1.el8	10.04.2022	SB2022041002 SB2022060126 SB2022060127 and 39 more
#VU62036 - Unchecked Return Value CVE-2022-23806	CWE-252	Medium	No	No	1.24.2-4.1.el8	10.04.2022	SB2022041002 SB2022041003 SB2022060126 and 46 more
#VU61599 - Improper input validation CVE-2022-21698	CWE-20	Medium	No	No	1.24.2-4.1.el8	24.03.2022	SB2022021530 SB2022032413 SB2022040807 and 110 more
#VU61291 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-0711	CWE-835	Medium	No	No	1.21.0-4.el8	14.03.2022	SB2022031420 SB2022031505 SB2022032910 and 8 more
#VU61227 - Incorrect Regular Expression CVE-2022-24921	CWE-185	Medium	No	No	1.23.0-1.1.el7, 1.23.0-1.1.el8, 1.24.2-4.1.el8	10.03.2022	SB2022031004 SB2022031005 SB2022041208 and 41 more
#VU59042 - Resource exhaustion CVE-2021-44717	CWE-400	Medium	No	No	1.23.0-1.el7, 1.23.0-1.el8	16.12.2021	SB2021121610 SB2021121646 SB2022031628 and 32 more
#VU58229 - Type confusion CVE-2021-41190	CWE-843	Low	No	No	1.23.0-1.el7, 1.23.0-1.el8	18.11.2021	SB2021111806 SB2021111807 SB2021111809 and 39 more
#VU57150 - Improper Certificate Validation CVE-2014-3577	CWE-295	Low	No	No	1.23.0-1.el7, 1.23.0-1.el8	08.10.2021	SB2014082106 SB2021100807 SB2023020872 and 24 more
#VU57149 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-21684	CWE-79	Low	No	No	1.23.0-1.el7, 1.23.0-1.el8	08.10.2021	SB2021100806 SB2023022165 SB2022031044 and 1 more

Showing elements 81 - 100 out of 143

Known vulnerabilities in cri-tools (Red Hat package) - page 5

Breakdown by Severity Chart

Vulnerabilities (143)

Please verify you're human