865 matches found
RHCOS 4 : OpenShift Container Platform 4.15.17 (RHSA-2024:3676)
The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:3676 advisory. - cri-o: malicious container can create symlink on host CVE-2024-5154 Note that Nessus has not tested for this issue but has instead relied...
RHCOS 4 : OpenShift Container Platform 4.13.43 (RHSA-2024:3496)
The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:3496 advisory. - cri-o: Arbitrary command injection via pod annotation CVE-2024-3154 Note that Nessus has not tested for this issue but has instead relied...
RHCOS 3 : OpenShift Container Platform 3.11.715 (RHSA-2022:4999)
The remote Red Hat Enterprise Linux CoreOS 3 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2022:4999 advisory. - cri-o: memory exhaustion on the node when access to the kube api CVE-2022-1708 Note that Nessus has not tested for this issue but has inste...
RHCOS 4 : OpenShift Container Platform 4.6.59 (RHSA-2022:4947)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:4947 advisory. - cri-o: memory exhaustion on the node when access to the kube api CVE-2022-1708 - credentials: Stored XSS vulnerabilities in jenkin...
RHCOS 4 : OpenShift Container Platform 4.9.38 (RHSA-2022:4972)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:4972 advisory. - cri-o: memory exhaustion on the node when access to the kube api CVE-2022-1708 Note that Nessus has not tested for this issue but has inste...
RHCOS 4 : OpenShift Container Platform 4.16.18 (RHSA-2024:8263)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:8263 advisory. - Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library CVE-2024-9341 - go/parser:...
RHCOS 4 : OpenShift Container Platform 4.15.37 (RHSA-2024:8428)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:8428 advisory. - Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library CVE-2024-9341 - Podman: Builda...
SpdyStream: DOS on CRI
...
Amazon Linux 2 : cri-tools, --advisory ALAS2-2026-3236 (ALAS-2026-3236)
"The version of cri-tools installed on the remote host is prior to 1.32.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3236 advisory. The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negati...
CVE-2026-32285 vulnerabilities
Vulnerabilities for packages: grafana, nuclei, witness, opentelemetry-collector-contrib, nfpm, k8sgpt, eksctl, cri-tools, minio, tempo, teleport, goreleaser, ollama, prometheus, gitlab-runner, vcluster, lazygit, malcontent, loki, opentelemetry-collector, terragrunt, grafana-alloy, dagger, dgraph,...
EulerOS 2.0 SP11 : containerd (EulerOS-SA-2026-1572)
According to the versions of the containerd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and...
EulerOS 2.0 SP10 : containerd (EulerOS-SA-2026-1329)
According to the versions of the containerd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : containerd is an open-source container runtime. Versions 1.7.28 and below, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4, and...
CVE-2025-47911 affecting package cri-tools for versions less than 1.32.0-4
CVE-2025-47911 affecting package cri-tools for versions less than 1.32.0-4. A patched version of the package is available...
CVE-2025-58190 affecting package cri-tools for versions less than 1.32.0-4
CVE-2025-58190 affecting package cri-tools for versions less than 1.32.0-4. A patched version of the package is available...
EulerOS 2.0 SP13 : docker-engine (EulerOS-SA-2026-1266)
According to the versions of the docker-engine packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and...
EulerOS 2.0 SP13 : docker-engine (EulerOS-SA-2026-1230)
According to the versions of the docker-engine packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and...
CVE-2025-47911 affecting package cri-o for versions less than 1.22.3-20
CVE-2025-47911 affecting package cri-o for versions less than 1.22.3-20. A patched version of the package is available...
CVE-2025-58190 affecting package cri-tools for versions less than 1.29.0-9
CVE-2025-58190 affecting package cri-tools for versions less than 1.29.0-9. A patched version of the package is available...