container-tools:rhel8/python3-criu vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the container-tools:rhel8/python3-criu package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free

Vulnerability	Vulnerable Version
M Directory Traversal	<0:3.18-5.module_el8.10.0+3926+f12484f5
M Information Exposure	<0:3.18-5.module_el8.10.0+3926+f12484f5
M CVE-2021-33198	<0:3.18-5.module_el8.10.0+3926+f12484f5
H Directory Traversal	<0:3.18-5.module_el8.10.0+3876+e55593a8
H Improper Input Validation	<0:3.18-5.module_el8.10.0+3876+e55593a8
H Link Following	<0:3.18-5.module_el8.10.0+3876+e55593a8
H CVE-2024-34158	<0:3.18-5.module_el8.10.0+3858+6ad51f9f
H CVE-2024-34156	<0:3.18-5.module_el8.10.0+3858+6ad51f9f
H CVE-2024-34155	<0:3.18-5.module_el8.10.0+3858+6ad51f9f
M CVE-2024-24791	<0:3.18-5.module_el8.10.0+3858+6ad51f9f
M CVE-2024-24788	<0:3.18-5.module_el8.10.0+3858+6ad51f9f
H Information Exposure Through Log Files	<0:3.18-5.module_el8.10.0+3876+e55593a8
H CVE-2024-37298	<0:3.18-5.module_el8.10.0+3876+e55593a8
H Improper Validation of Integrity Check Value	<0:3.18-5.module_el8.10.0+3876+e55593a8
H CVE-2024-24789	<0:3.18-5.module_el8.10.0+3876+e55593a8
M CVE-2024-24784	<0:3.18-5.module_el8.10.0+3858+6ad51f9f
M CVE-2024-24783	<0:3.18-5.module_el8.10.0+3858+6ad51f9f
H Memory Leak	<0:3.18-5.module_el8.10.0+3876+e55593a8
H CVE-2023-45290	<0:3.18-5.module_el8.10.0+3858+6ad51f9f
M CVE-2024-28176	<0:3.18-5.module_el8.10.0+3858+6ad51f9f
M CVE-2024-28180	<0:3.18-5.module_el8.10.0+3858+6ad51f9f
M CVE-2024-24786	<0:3.18-5.module_el8.10.0+3845+87b84552
H CVE-2022-41715	<0:3.18-5.module_el8.10.0+3845+87b84552
H HTTP Request Smuggling	<0:3.18-5.module_el8.10.0+3845+87b84552
H Link Following	<0:3.18-5.module_el8.10.0+3845+87b84552
H Exposure of Resource to Wrong Sphere	<0:3.18-4.module_el8.9.0+3643+9234dc3b
M Cross-site Scripting (XSS)	<0:3.18-4.module_el8.9.0+3643+9234dc3b
M Interpretation Conflict	<0:3.18-4.module_el8.9.0+3643+9234dc3b
M Arbitrary Code Injection	<0:3.18-4.module_el8.9.0+3643+9234dc3b
M Link Following	<0:3.18-4.module_el8.9.0+3643+9234dc3b
M Use of Incorrectly-Resolved Name or Reference	<0:3.18-4.module_el8.9.0+3643+9234dc3b
M Improper Preservation of Permissions	<0:3.18-4.module_el8.9.0+3643+9234dc3b
M Incorrect Authorization	<0:3.18-4.module_el8.9.0+3643+9234dc3b
M CVE-2023-24540	<0:3.18-4.module_el8.9.0+3643+9234dc3b
M Arbitrary Code Injection	<0:3.18-4.module_el8.9.0+3643+9234dc3b
M Arbitrary Code Injection	<0:3.18-4.module_el8.9.0+3643+9234dc3b
M Integer Overflow or Wraparound	<0:3.18-4.module_el8.9.0+3643+9234dc3b
M Allocation of Resources Without Limits or Throttling	<0:3.18-4.module_el8.9.0+3643+9234dc3b
M Resource Exhaustion	<0:3.18-4.module_el8.9.0+3643+9234dc3b
M Allocation of Resources Without Limits or Throttling	<0:3.18-4.module_el8.9.0+3643+9234dc3b
M Resource Exhaustion	<0:3.18-4.module_el8.9.0+3643+9234dc3b
M CVE-2022-41723	<0:3.18-4.module_el8.9.0+3643+9234dc3b
M Resource Exhaustion	<0:3.18-4.module_el8.9.0+3643+9234dc3b
M Improper Locking	<0:3.15-3.module_el8.6.0+2751+06427ca3
L Placement of User into Incorrect Group	<0:3.15-3.module_el8.7.0+3407+95aa0ca9
M Improper Cross-boundary Removal of Sensitive Data	<0:3.15-3.module_el8.6.0+2751+06427ca3
M Time-of-check Time-of-use (TOCTOU)	<0:3.15-3.module_el8.7.0+3407+95aa0ca9
M CVE-2022-32189	<0:3.15-3.module_el8.7.0+3407+95aa0ca9
L Placement of User into Incorrect Group	<0:3.15-3.module_el8.7.0+3407+95aa0ca9
M CVE-2022-27664	<0:3.15-3.module_el8.7.0+3407+95aa0ca9
M CVE-2022-32148	<0:3.15-3.module_el8.7.0+3407+95aa0ca9
M Uncontrolled Recursion	<0:3.15-3.module_el8.7.0+3407+95aa0ca9
M Uncontrolled Recursion	<0:3.15-3.module_el8.7.0+3407+95aa0ca9
M Uncontrolled Recursion	<0:3.15-3.module_el8.7.0+3407+95aa0ca9
M Uncontrolled Recursion	<0:3.15-3.module_el8.7.0+3407+95aa0ca9
M Uncontrolled Recursion	<0:3.15-3.module_el8.7.0+3407+95aa0ca9
M Uncontrolled Recursion	<0:3.15-3.module_el8.7.0+3407+95aa0ca9
M Uncontrolled Recursion	<0:3.15-3.module_el8.7.0+3407+95aa0ca9
M HTTP Request Smuggling	<0:3.15-3.module_el8.7.0+3407+95aa0ca9
H Incorrect Default Permissions	<0:3.15-3.module_el8.6.0+2751+06427ca3
H Incorrect Default Permissions	<0:3.15-3.module_el8.6.0+2751+06427ca3
H Incorrect Default Permissions	<0:3.15-3.module_el8.6.0+2751+06427ca3
H Allocation of Resources Without Limits or Throttling	<0:3.15-3.module_el8.6.0+2751+06427ca3
H Improper Privilege Management	<0:3.15-3.module_el8.6.0+2751+06427ca3
M Allocation of Resources Without Limits or Throttling	<0:3.15-3.module_el8.7.0+3407+95aa0ca9
M Use of Insufficiently Random Values	<0:3.15-3.module_el8.7.0+3407+95aa0ca9

Vulnerability

Vulnerable Version

Directory Traversal

<0:3.18-5.module_el8.10.0+3926+f12484f5

Information Exposure

<0:3.18-5.module_el8.10.0+3926+f12484f5

CVE-2021-33198

<0:3.18-5.module_el8.10.0+3926+f12484f5

Directory Traversal

<0:3.18-5.module_el8.10.0+3876+e55593a8

Improper Input Validation

<0:3.18-5.module_el8.10.0+3876+e55593a8

Link Following

<0:3.18-5.module_el8.10.0+3876+e55593a8

CVE-2024-34158

<0:3.18-5.module_el8.10.0+3858+6ad51f9f

CVE-2024-34156

<0:3.18-5.module_el8.10.0+3858+6ad51f9f

CVE-2024-34155

<0:3.18-5.module_el8.10.0+3858+6ad51f9f

CVE-2024-24791

<0:3.18-5.module_el8.10.0+3858+6ad51f9f

CVE-2024-24788

<0:3.18-5.module_el8.10.0+3858+6ad51f9f

Information Exposure Through Log Files

<0:3.18-5.module_el8.10.0+3876+e55593a8

CVE-2024-37298

<0:3.18-5.module_el8.10.0+3876+e55593a8

Improper Validation of Integrity Check Value

<0:3.18-5.module_el8.10.0+3876+e55593a8

CVE-2024-24789

<0:3.18-5.module_el8.10.0+3876+e55593a8

CVE-2024-24784

<0:3.18-5.module_el8.10.0+3858+6ad51f9f

CVE-2024-24783

<0:3.18-5.module_el8.10.0+3858+6ad51f9f

Memory Leak

<0:3.18-5.module_el8.10.0+3876+e55593a8

CVE-2023-45290

<0:3.18-5.module_el8.10.0+3858+6ad51f9f

CVE-2024-28176

<0:3.18-5.module_el8.10.0+3858+6ad51f9f

CVE-2024-28180

<0:3.18-5.module_el8.10.0+3858+6ad51f9f

CVE-2024-24786

<0:3.18-5.module_el8.10.0+3845+87b84552

CVE-2022-41715

<0:3.18-5.module_el8.10.0+3845+87b84552

HTTP Request Smuggling

<0:3.18-5.module_el8.10.0+3845+87b84552

Link Following

<0:3.18-5.module_el8.10.0+3845+87b84552

Exposure of Resource to Wrong Sphere