Known vulnerabilities in cri-tools (Red Hat package) - page 5

Vendor: Red Hat Inc.
Software: cri-tools (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:cri-tools_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 138
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting cri-tools (Red Hat package) cri-tools (Red Hat package) is affected by 138 known vulnerabilities: 8 high, 94 medium, 36 low Critical High Medium Low

Vulnerabilities (138)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77628 - Improper input validation
CVE-2012-6153		 CWE-20 Medium
No
No
 1.23.0-1.el7, 1.23.0-1.el8 22.06.2023 SB2023062250
SB2023092013
SB2023092037
and 15 more
#VU68299 - Incorrect Permission Assignment for Critical Resource
CVE-2022-0532		 CWE-732 Medium
No
No
 1.23.0-1.el7, 1.23.0-1.el8 13.10.2022 SB2022101333
SB2022101334
SB2022101335
and 4 more
#VU64269 - Integer overflow
CVE-2022-28327		 CWE-190 Low
No
No
 1.24.2-4.1.el8 14.06.2022 SB2022041004
SB2022061422
SB2022061506
and 90 more
#VU64266 - Buffer overflow
CVE-2022-24675		 CWE-120 Low
No
No
 1.23.0-1.1.el7, 1.23.0-1.1.el8, 1.24.2-4.1.el8 14.06.2022 SB2022041004
SB2022061422
SB2022061511
and 88 more
#VU64008 - Resource exhaustion
CVE-2022-1708		 CWE-400 Medium
No
No
 1.19.0-7.el8, 1.20.0-4.el8 07.06.2022 SB2022060707
SB2022061334
SB2022061627
and 15 more
#VU63090 - Permissions, Privileges, and Access Controls
CVE-2022-29162		 CWE-264 Medium
No
No
 1.24.2-4.1.el8 12.05.2022 SB2022051205
SB2022062435
SB2022071158
and 32 more
#VU62304 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-29046		 CWE-79 Low
No
No
 1.19.0-7.el8 13.04.2022 SB2022041333
SB2022053122
SB2022061218
and 3 more
#VU62292 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-29036		 CWE-79 Low
No
No
 1.19.0-7.el8 13.04.2022 SB2022041321
SB2022053122
SB2022061218
and 2 more
#VU62039 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-27191		 CWE-327 Medium
No
No
 1.24.2-4.1.el8 10.04.2022 SB2022041004
SB2022041406
SB2022081226
and 91 more
#VU62037 - Incorrect Authorization
CVE-2022-23773		 CWE-863 Low
Available
No
 1.24.2-4.1.el8 10.04.2022 SB2022041002
SB2022060126
SB2022060127
and 39 more
#VU62036 - Unchecked Return Value
CVE-2022-23806		 CWE-252 Medium
No
No
 1.24.2-4.1.el8 10.04.2022 SB2022041002
SB2022041003
SB2022060126
and 46 more
#VU61291 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0711		 CWE-835 Medium
No
No
 1.21.0-4.el8 14.03.2022 SB2022031420
SB2022031505
SB2022032910
and 8 more
#VU61227 - Incorrect Regular Expression
CVE-2022-24921		 CWE-185 Medium
No
No
 1.23.0-1.1.el7, 1.23.0-1.1.el8, 1.24.2-4.1.el8 10.03.2022 SB2022031004
SB2022031005
SB2022041208
and 41 more
#VU59042 - Resource exhaustion
CVE-2021-44717		 CWE-400 Medium
No
No
 1.23.0-1.el7, 1.23.0-1.el8 16.12.2021 SB2021121610
SB2021121646
SB2022031628
and 32 more
#VU58824 - Improper input validation
CVE-2021-44716		 CWE-20 Medium
No
No
 1.23.0-1.el7, 1.23.0-1.el8 10.12.2021 SB2021121010
SB2021121011
SB2021121605
and 67 more
#VU58229 - Type confusion
CVE-2021-41190		 CWE-843 Low
No
No
 1.23.0-1.el7, 1.23.0-1.el8 18.11.2021 SB2021111806
SB2021111807
SB2021111809
and 39 more
#VU57150 - Improper Certificate Validation
CVE-2014-3577		 CWE-295 Low
No
No
 1.23.0-1.el7, 1.23.0-1.el8 08.10.2021 SB2014082106
SB2021100807
SB2023020872
and 24 more
#VU57149 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21684		 CWE-79 Low
No
No
 1.23.0-1.el7, 1.23.0-1.el8 08.10.2021 SB2021100806
SB2023022165
SB2022031044
and 1 more
#VU56829 - Improper input validation
CVE-2021-29923		 CWE-20 Medium
No
No
 1.22.0-2.el8 22.09.2021 SB2021092225
SB2021092226
SB2021100408
and 37 more
#VU55668 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2021-36221		 CWE-362 Medium
No
No
 1.22.0-2.el8 10.08.2021 SB2021081001
SB2021081217
SB2021081219
and 32 more


Showing elements 81 - 100 out of 138