container-tools:rhel8/oci-seccomp-bpf-hook vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the container-tools:rhel8/oci-seccomp-bpf-hook package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free

Vulnerability	Vulnerable Version
M Directory Traversal	<0:1.2.10-1.module_el8.10.0+3792+03eaed9c
M Information Exposure	<0:1.2.10-1.module_el8.10.0+3792+03eaed9c
M CVE-2021-33198	<0:1.2.10-1.module_el8.10.0+3792+03eaed9c
H Directory Traversal	<0:1.2.10-1.module_el8.10.0+3876+e55593a8
H Improper Input Validation	<0:1.2.10-1.module_el8.10.0+3876+e55593a8
H Link Following	<0:1.2.10-1.module_el8.10.0+3876+e55593a8
H CVE-2024-34158	<0:1.2.10-1.module_el8.10.0+3876+e55593a8
H CVE-2024-34156	<0:1.2.10-1.module_el8.10.0+3876+e55593a8
H CVE-2024-34155	<0:1.2.10-1.module_el8.10.0+3876+e55593a8
M CVE-2024-24791	<0:1.2.10-1.module_el8.10.0+3792+03eaed9c
M CVE-2024-24788	<0:1.2.10-1.module_el8.10.0+3792+03eaed9c
H Information Exposure Through Log Files	<0:1.2.10-1.module_el8.10.0+3792+03eaed9c
H CVE-2024-37298	<0:1.2.10-1.module_el8.10.0+3792+03eaed9c
H Improper Validation of Integrity Check Value	<0:1.2.10-1.module_el8.10.0+3792+03eaed9c
H CVE-2024-24789	<0:1.2.10-1.module_el8.10.0+3792+03eaed9c
M CVE-2024-24784	<0:1.2.10-1.module_el8.10.0+3792+03eaed9c
M CVE-2024-24783	<0:1.2.10-1.module_el8.10.0+3792+03eaed9c
H Memory Leak	<0:1.2.10-1.module_el8.10.0+3792+03eaed9c
H CVE-2023-45290	<0:1.2.10-1.module_el8.10.0+3876+e55593a8
M CVE-2024-28176	<0:1.2.10-1.module_el8.10.0+3792+03eaed9c
M CVE-2024-28180	<0:1.2.10-1.module_el8.10.0+3792+03eaed9c
M CVE-2024-24786	<0:1.2.10-1.module_el8.10.0+3792+03eaed9c
H CVE-2022-41715	<0:1.2.10-1.module_el8.10.0+3792+03eaed9c
H HTTP Request Smuggling	<0:1.2.10-1.module_el8.10.0+3792+03eaed9c
H Link Following	<0:1.2.10-1.module_el8.10.0+3792+03eaed9c
H Exposure of Resource to Wrong Sphere	<0:1.2.9-1.module_el8.9.0+3643+9234dc3b
M Cross-site Scripting (XSS)	<0:1.2.9-1.module_el8.9.0+3643+9234dc3b
M Interpretation Conflict	<0:1.2.9-1.module_el8.9.0+3643+9234dc3b
M Arbitrary Code Injection	<0:1.2.9-1.module_el8.9.0+3643+9234dc3b
M Link Following	<0:1.2.9-1.module_el8.9.0+3643+9234dc3b
M Use of Incorrectly-Resolved Name or Reference	<0:1.2.9-1.module_el8.9.0+3643+9234dc3b
M Improper Preservation of Permissions	<0:1.2.9-1.module_el8.9.0+3643+9234dc3b
M Incorrect Authorization	<0:1.2.9-1.module_el8.9.0+3643+9234dc3b
M CVE-2023-24540	<0:1.2.9-1.module_el8.9.0+3643+9234dc3b
M Arbitrary Code Injection	<0:1.2.9-1.module_el8.9.0+3643+9234dc3b
M Arbitrary Code Injection	<0:1.2.9-1.module_el8.9.0+3643+9234dc3b
M Integer Overflow or Wraparound	<0:1.2.9-1.module_el8.9.0+3643+9234dc3b
M Allocation of Resources Without Limits or Throttling	<0:1.2.9-1.module_el8.9.0+3643+9234dc3b
M Resource Exhaustion	<0:1.2.9-1.module_el8.9.0+3643+9234dc3b
M Allocation of Resources Without Limits or Throttling	<0:1.2.9-1.module_el8.9.0+3643+9234dc3b
M Resource Exhaustion	<0:1.2.9-1.module_el8.9.0+3643+9234dc3b
M CVE-2022-41723	<0:1.2.9-1.module_el8.9.0+3643+9234dc3b
M Resource Exhaustion	<0:1.2.9-1.module_el8.9.0+3643+9234dc3b
M Improper Locking	<0:1.2.3-3.module_el8.5.0+2613+1b78b731
L Placement of User into Incorrect Group	<0:1.2.6-1.module_el8.6.0+3336+00d107d5
M Improper Cross-boundary Removal of Sensitive Data	<0:1.2.3-3.module_el8.5.0+2613+1b78b731
M Time-of-check Time-of-use (TOCTOU)	<0:1.2.8-1.module_el8.8.0+3470+252b1910
M CVE-2022-32189	<0:1.2.8-1.module_el8.8.0+3470+252b1910
L Placement of User into Incorrect Group	<0:1.2.6-1.module_el8.6.0+3336+00d107d5
M CVE-2022-27664	<0:1.2.8-1.module_el8.8.0+3470+252b1910
M CVE-2022-32148	<0:1.2.8-1.module_el8.8.0+3470+252b1910
M Uncontrolled Recursion	<0:1.2.8-1.module_el8.8.0+3470+252b1910
M Uncontrolled Recursion	<0:1.2.8-1.module_el8.8.0+3470+252b1910
M Uncontrolled Recursion	<0:1.2.8-1.module_el8.8.0+3470+252b1910
M Uncontrolled Recursion	<0:1.2.8-1.module_el8.8.0+3470+252b1910
M Uncontrolled Recursion	<0:1.2.8-1.module_el8.8.0+3470+252b1910
M Uncontrolled Recursion	<0:1.2.8-1.module_el8.8.0+3470+252b1910
M Uncontrolled Recursion	<0:1.2.8-1.module_el8.8.0+3470+252b1910
M HTTP Request Smuggling	<0:1.2.8-1.module_el8.8.0+3470+252b1910
H Incorrect Default Permissions	<0:1.2.3-3.module_el8.6.0+2877+8e437bf5
H Incorrect Default Permissions	<0:1.2.3-3.module_el8.6.0+2877+8e437bf5
H Incorrect Default Permissions	<0:1.2.3-3.module_el8.6.0+2877+8e437bf5
H Allocation of Resources Without Limits or Throttling	<0:1.2.3-3.module_el8.6.0+2877+8e437bf5
H Improper Privilege Management	<0:1.2.3-3.module_el8.6.0+2877+8e437bf5
M Allocation of Resources Without Limits or Throttling	<0:1.2.8-1.module_el8.8.0+3470+252b1910
M Use of Insufficiently Random Values	<0:1.2.8-1.module_el8.8.0+3470+252b1910

Vulnerability

Vulnerable Version

Directory Traversal

<0:1.2.10-1.module_el8.10.0+3792+03eaed9c

Information Exposure

<0:1.2.10-1.module_el8.10.0+3792+03eaed9c

CVE-2021-33198

<0:1.2.10-1.module_el8.10.0+3792+03eaed9c

Directory Traversal

<0:1.2.10-1.module_el8.10.0+3876+e55593a8

Improper Input Validation

<0:1.2.10-1.module_el8.10.0+3876+e55593a8

Link Following

<0:1.2.10-1.module_el8.10.0+3876+e55593a8

CVE-2024-34158

<0:1.2.10-1.module_el8.10.0+3876+e55593a8

CVE-2024-34156

<0:1.2.10-1.module_el8.10.0+3876+e55593a8

CVE-2024-34155

<0:1.2.10-1.module_el8.10.0+3876+e55593a8

CVE-2024-24791

<0:1.2.10-1.module_el8.10.0+3792+03eaed9c

CVE-2024-24788

<0:1.2.10-1.module_el8.10.0+3792+03eaed9c

Information Exposure Through Log Files

<0:1.2.10-1.module_el8.10.0+3792+03eaed9c

CVE-2024-37298

<0:1.2.10-1.module_el8.10.0+3792+03eaed9c

Improper Validation of Integrity Check Value

<0:1.2.10-1.module_el8.10.0+3792+03eaed9c

CVE-2024-24789

<0:1.2.10-1.module_el8.10.0+3792+03eaed9c

CVE-2024-24784

<0:1.2.10-1.module_el8.10.0+3792+03eaed9c

CVE-2024-24783

<0:1.2.10-1.module_el8.10.0+3792+03eaed9c

Memory Leak

<0:1.2.10-1.module_el8.10.0+3792+03eaed9c

CVE-2023-45290

<0:1.2.10-1.module_el8.10.0+3876+e55593a8

CVE-2024-28176

<0:1.2.10-1.module_el8.10.0+3792+03eaed9c

CVE-2024-28180

<0:1.2.10-1.module_el8.10.0+3792+03eaed9c

CVE-2024-24786

<0:1.2.10-1.module_el8.10.0+3792+03eaed9c

CVE-2022-41715

<0:1.2.10-1.module_el8.10.0+3792+03eaed9c

HTTP Request Smuggling

<0:1.2.10-1.module_el8.10.0+3792+03eaed9c

Link Following

<0:1.2.10-1.module_el8.10.0+3792+03eaed9c

Exposure of Resource to Wrong Sphere

<0:1.2.9-1.module_el8.9.0+3643+9234dc3b

Cross-site Scripting (XSS)

<0:1.2.9-1.module_el8.9.0+3643+9234dc3b

Interpretation Conflict

<0:1.2.9-1.module_el8.9.0+3643+9234dc3b

Arbitrary Code Injection

<0:1.2.9-1.module_el8.9.0+3643+9234dc3b

Link Following

<0:1.2.9-1.module_el8.9.0+3643+9234dc3b

Use of Incorrectly-Resolved Name or Reference

<0:1.2.9-1.module_el8.9.0+3643+9234dc3b

Improper Preservation of Permissions

<0:1.2.9-1.module_el8.9.0+3643+9234dc3b

Incorrect Authorization

<0:1.2.9-1.module_el8.9.0+3643+9234dc3b

CVE-2023-24540

<0:1.2.9-1.module_el8.9.0+3643+9234dc3b

Arbitrary Code Injection

<0:1.2.9-1.module_el8.9.0+3643+9234dc3b

Arbitrary Code Injection

<0:1.2.9-1.module_el8.9.0+3643+9234dc3b

Integer Overflow or Wraparound

<0:1.2.9-1.module_el8.9.0+3643+9234dc3b

Allocation of Resources Without Limits or Throttling

<0:1.2.9-1.module_el8.9.0+3643+9234dc3b

Resource Exhaustion

<0:1.2.9-1.module_el8.9.0+3643+9234dc3b

Allocation of Resources Without Limits or Throttling

<0:1.2.9-1.module_el8.9.0+3643+9234dc3b

Resource Exhaustion

<0:1.2.9-1.module_el8.9.0+3643+9234dc3b

CVE-2022-41723

<0:1.2.9-1.module_el8.9.0+3643+9234dc3b

Resource Exhaustion

<0:1.2.9-1.module_el8.9.0+3643+9234dc3b

Improper Locking

<0:1.2.3-3.module_el8.5.0+2613+1b78b731

Placement of User into Incorrect Group

<0:1.2.6-1.module_el8.6.0+3336+00d107d5

Improper Cross-boundary Removal of Sensitive Data

<0:1.2.3-3.module_el8.5.0+2613+1b78b731

Time-of-check Time-of-use (TOCTOU)

<0:1.2.8-1.module_el8.8.0+3470+252b1910

CVE-2022-32189

<0:1.2.8-1.module_el8.8.0+3470+252b1910

Placement of User into Incorrect Group

<0:1.2.6-1.module_el8.6.0+3336+00d107d5

CVE-2022-27664

<0:1.2.8-1.module_el8.8.0+3470+252b1910

CVE-2022-32148

<0:1.2.8-1.module_el8.8.0+3470+252b1910

Uncontrolled Recursion

<0:1.2.8-1.module_el8.8.0+3470+252b1910

Uncontrolled Recursion

<0:1.2.8-1.module_el8.8.0+3470+252b1910

Uncontrolled Recursion

<0:1.2.8-1.module_el8.8.0+3470+252b1910

Uncontrolled Recursion

<0:1.2.8-1.module_el8.8.0+3470+252b1910

Uncontrolled Recursion

<0:1.2.8-1.module_el8.8.0+3470+252b1910

Uncontrolled Recursion

<0:1.2.8-1.module_el8.8.0+3470+252b1910

Uncontrolled Recursion

<0:1.2.8-1.module_el8.8.0+3470+252b1910

HTTP Request Smuggling

<0:1.2.8-1.module_el8.8.0+3470+252b1910

Incorrect Default Permissions

<0:1.2.3-3.module_el8.6.0+2877+8e437bf5

Incorrect Default Permissions

<0:1.2.3-3.module_el8.6.0+2877+8e437bf5

Incorrect Default Permissions

<0:1.2.3-3.module_el8.6.0+2877+8e437bf5

Allocation of Resources Without Limits or Throttling

<0:1.2.3-3.module_el8.6.0+2877+8e437bf5

Improper Privilege Management

<0:1.2.3-3.module_el8.6.0+2877+8e437bf5

Allocation of Resources Without Limits or Throttling

<0:1.2.8-1.module_el8.8.0+3470+252b1910

Use of Insufficiently Random Values

<0:1.2.8-1.module_el8.8.0+3470+252b1910

container-tools:rhel8/oci-seccomp-bpf-hook/.../oci-seccomp-bpf-hook vulnerabilities

Direct Vulnerabilities

How to fix?