container-tools:rhel8/slirp4netns vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the container-tools:rhel8/slirp4netns package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free

Vulnerability	Vulnerable Version
M Directory Traversal	<0:1.2.3-1.module_el8.10.0+3901+4b80ecd7
M Information Exposure	<0:1.2.3-1.module_el8.10.0+3901+4b80ecd7
M CVE-2021-33198	<0:1.2.3-1.module_el8.10.0+3901+4b80ecd7
H Directory Traversal	<0:1.2.3-1.module_el8.10.0+3845+87b84552
H Improper Input Validation	<0:1.2.3-1.module_el8.10.0+3845+87b84552
H Link Following	<0:1.2.3-1.module_el8.10.0+3845+87b84552
H CVE-2024-34158	<0:1.2.3-1.module_el8.10.0+3876+e55593a8
H CVE-2024-34156	<0:1.2.3-1.module_el8.10.0+3876+e55593a8
H CVE-2024-34155	<0:1.2.3-1.module_el8.10.0+3876+e55593a8
M CVE-2024-24791	<0:1.2.3-1.module_el8.10.0+3876+e55593a8
M CVE-2024-24788	<0:1.2.3-1.module_el8.10.0+3876+e55593a8
H Information Exposure Through Log Files	<0:1.2.3-1.module_el8.10.0+3876+e55593a8
H CVE-2024-37298	<0:1.2.3-1.module_el8.10.0+3876+e55593a8
H Improper Validation of Integrity Check Value	<0:1.2.3-1.module_el8.10.0+3876+e55593a8
H CVE-2024-24789	<0:1.2.3-1.module_el8.10.0+3876+e55593a8
M CVE-2024-24784	<0:1.2.3-1.module_el8.10.0+3876+e55593a8
M CVE-2024-24783	<0:1.2.3-1.module_el8.10.0+3876+e55593a8
H Memory Leak	<0:1.2.3-1.module_el8.10.0+3876+e55593a8
H CVE-2023-45290	<0:1.2.3-1.module_el8.10.0+3876+e55593a8
M CVE-2024-28176	<0:1.2.3-1.module_el8.10.0+3845+87b84552
M CVE-2024-28180	<0:1.2.3-1.module_el8.10.0+3845+87b84552
M CVE-2024-24786	<0:1.2.3-1.module_el8.10.0+3845+87b84552
H CVE-2022-41715	<0:1.2.3-1.module_el8.10.0+3845+87b84552
H HTTP Request Smuggling	<0:1.2.3-1.module_el8.10.0+3845+87b84552
H Link Following	<0:1.2.3-1.module_el8.10.0+3845+87b84552
H Exposure of Resource to Wrong Sphere	<0:1.2.1-1.module_el8.9.0+3643+9234dc3b
M Cross-site Scripting (XSS)	<0:1.2.1-1.module_el8.9.0+3643+9234dc3b
M Interpretation Conflict	<0:1.2.1-1.module_el8.9.0+3643+9234dc3b
M Arbitrary Code Injection	<0:1.2.1-1.module_el8.9.0+3643+9234dc3b
M Link Following	<0:1.2.1-1.module_el8.9.0+3643+9234dc3b
M Use of Incorrectly-Resolved Name or Reference	<0:1.2.1-1.module_el8.9.0+3643+9234dc3b
M Improper Preservation of Permissions	<0:1.2.1-1.module_el8.9.0+3643+9234dc3b
M Incorrect Authorization	<0:1.2.1-1.module_el8.9.0+3643+9234dc3b
M CVE-2023-24540	<0:1.2.1-1.module_el8.9.0+3643+9234dc3b
M Arbitrary Code Injection	<0:1.2.1-1.module_el8.9.0+3643+9234dc3b
M Arbitrary Code Injection	<0:1.2.1-1.module_el8.9.0+3643+9234dc3b
M Integer Overflow or Wraparound	<0:1.2.1-1.module_el8.9.0+3643+9234dc3b
M Allocation of Resources Without Limits or Throttling	<0:1.2.1-1.module_el8.9.0+3643+9234dc3b
M Resource Exhaustion	<0:1.2.1-1.module_el8.9.0+3643+9234dc3b
M Allocation of Resources Without Limits or Throttling	<0:1.2.1-1.module_el8.9.0+3643+9234dc3b
M Resource Exhaustion	<0:1.2.1-1.module_el8.9.0+3643+9234dc3b
M CVE-2022-41723	<0:1.2.1-1.module_el8.9.0+3643+9234dc3b
M Resource Exhaustion	<0:1.2.1-1.module_el8.9.0+3643+9234dc3b
M Improper Locking	<0:1.1.8-1.module_el8.5.0+2613+1b78b731
L Placement of User into Incorrect Group	<0:1.2.0-2.module_el8.6.0+3128+1510fbd1
M Improper Cross-boundary Removal of Sensitive Data	<0:1.1.8-1.module_el8.5.0+2613+1b78b731
M Time-of-check Time-of-use (TOCTOU)	<0:1.2.0-2.module_el8.7.0+3407+95aa0ca9
M CVE-2022-32189	<0:1.2.0-2.module_el8.7.0+3407+95aa0ca9
L Placement of User into Incorrect Group	<0:1.2.0-2.module_el8.6.0+3128+1510fbd1
M CVE-2022-27664	<0:1.2.0-2.module_el8.7.0+3407+95aa0ca9
M CVE-2022-32148	<0:1.2.0-2.module_el8.7.0+3407+95aa0ca9
M Uncontrolled Recursion	<0:1.2.0-2.module_el8.7.0+3407+95aa0ca9
M Uncontrolled Recursion	<0:1.2.0-2.module_el8.7.0+3407+95aa0ca9
M Uncontrolled Recursion	<0:1.2.0-2.module_el8.7.0+3407+95aa0ca9
M Uncontrolled Recursion	<0:1.2.0-2.module_el8.7.0+3407+95aa0ca9
M Uncontrolled Recursion	<0:1.2.0-2.module_el8.7.0+3407+95aa0ca9
M Uncontrolled Recursion	<0:1.2.0-2.module_el8.7.0+3407+95aa0ca9
M Uncontrolled Recursion	<0:1.2.0-2.module_el8.7.0+3407+95aa0ca9
M HTTP Request Smuggling	<0:1.2.0-2.module_el8.7.0+3407+95aa0ca9
H Incorrect Default Permissions	<0:1.1.8-2.module_el8.6.0+2877+8e437bf5
H Incorrect Default Permissions	<0:1.1.8-2.module_el8.6.0+2877+8e437bf5
H Incorrect Default Permissions	<0:1.1.8-2.module_el8.6.0+2877+8e437bf5
H Allocation of Resources Without Limits or Throttling	<0:1.1.8-2.module_el8.6.0+2877+8e437bf5
H Improper Privilege Management	<0:1.1.8-2.module_el8.6.0+2877+8e437bf5
M Allocation of Resources Without Limits or Throttling	<0:1.2.0-2.module_el8.7.0+3407+95aa0ca9
M Use of Insufficiently Random Values	<0:1.2.0-2.module_el8.7.0+3407+95aa0ca9

Vulnerability

Vulnerable Version

Directory Traversal

<0:1.2.3-1.module_el8.10.0+3901+4b80ecd7

Information Exposure

<0:1.2.3-1.module_el8.10.0+3901+4b80ecd7

CVE-2021-33198

<0:1.2.3-1.module_el8.10.0+3901+4b80ecd7

Directory Traversal

<0:1.2.3-1.module_el8.10.0+3845+87b84552

Improper Input Validation

<0:1.2.3-1.module_el8.10.0+3845+87b84552

Link Following

<0:1.2.3-1.module_el8.10.0+3845+87b84552

CVE-2024-34158

<0:1.2.3-1.module_el8.10.0+3876+e55593a8

CVE-2024-34156

<0:1.2.3-1.module_el8.10.0+3876+e55593a8

CVE-2024-34155

<0:1.2.3-1.module_el8.10.0+3876+e55593a8

CVE-2024-24791

<0:1.2.3-1.module_el8.10.0+3876+e55593a8

CVE-2024-24788

<0:1.2.3-1.module_el8.10.0+3876+e55593a8

Information Exposure Through Log Files

<0:1.2.3-1.module_el8.10.0+3876+e55593a8

CVE-2024-37298

<0:1.2.3-1.module_el8.10.0+3876+e55593a8

Improper Validation of Integrity Check Value

<0:1.2.3-1.module_el8.10.0+3876+e55593a8

CVE-2024-24789

<0:1.2.3-1.module_el8.10.0+3876+e55593a8

CVE-2024-24784

<0:1.2.3-1.module_el8.10.0+3876+e55593a8

CVE-2024-24783

<0:1.2.3-1.module_el8.10.0+3876+e55593a8

Memory Leak

<0:1.2.3-1.module_el8.10.0+3876+e55593a8

CVE-2023-45290

<0:1.2.3-1.module_el8.10.0+3876+e55593a8

CVE-2024-28176

<0:1.2.3-1.module_el8.10.0+3845+87b84552

CVE-2024-28180

<0:1.2.3-1.module_el8.10.0+3845+87b84552

CVE-2024-24786

<0:1.2.3-1.module_el8.10.0+3845+87b84552

CVE-2022-41715

<0:1.2.3-1.module_el8.10.0+3845+87b84552

HTTP Request Smuggling

<0:1.2.3-1.module_el8.10.0+3845+87b84552

Link Following

<0:1.2.3-1.module_el8.10.0+3845+87b84552

Exposure of Resource to Wrong Sphere