criu vulnerabilities

Known vulnerabilities in the criu package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
H Improper Privilege Management	<0:3.18-5.module+el8.10.0+1815+5fe7415e
M Directory Traversal	<0:3.18-5.module+el8.10.0+1815+5fe7415e
M Information Exposure	<0:3.18-5.module+el8.10.0+1815+5fe7415e
M CVE-2021-33198	<0:3.18-5.module+el8.10.0+1815+5fe7415e
H Directory Traversal	<0:3.18-5.module+el8.10.0+1815+5fe7415e
H Improper Input Validation	<0:3.18-5.module+el8.10.0+1815+5fe7415e
H Link Following	<0:3.18-5.module+el8.10.0+1815+5fe7415e
H CVE-2024-34158	<0:3.18-5.module+el8.10.0+1815+5fe7415e
H CVE-2024-34156	<0:3.18-5.module+el8.10.0+1815+5fe7415e
H CVE-2024-34155	<0:3.18-5.module+el8.10.0+1815+5fe7415e
H Information Exposure Through Log Files	<0:3.18-5.module+el8.10.0+1815+5fe7415e
H CVE-2024-37298	<0:3.18-5.module+el8.10.0+1815+5fe7415e
H Improper Validation of Integrity Check Value	<0:3.18-5.module+el8.10.0+1815+5fe7415e
H CVE-2024-24789	<0:3.18-5.module+el8.10.0+1815+5fe7415e
H CVE-2024-24784	<0:3.18-5.module+el8.10.0+1815+5fe7415e
H CVE-2024-24783	<0:3.18-5.module+el8.10.0+1815+5fe7415e
H Memory Leak	<0:3.18-5.module+el8.10.0+1815+5fe7415e
H CVE-2023-45290	<0:3.18-5.module+el8.10.0+1815+5fe7415e
M CVE-2024-28176	<0:3.18-5.module+el8.10.0+1815+5fe7415e
M CVE-2024-28180	<0:3.18-5.module+el8.10.0+1815+5fe7415e
H CVE-2024-24786	<0:3.18-5.module+el8.10.0+1815+5fe7415e
H CVE-2022-41715	<0:3.18-5.module+el8.10.0+1815+5fe7415e
H HTTP Request Smuggling	<0:3.18-5.module+el8.10.0+1815+5fe7415e
H Link Following	<0:3.18-5.module+el8.10.0+1815+5fe7415e
H Exposure of Resource to Wrong Sphere	<0:3.18-4.module+el8.9.0+1420+91577025
M Interpretation Conflict	<0:3.15-3.module+el8.9.0+1445+07728297
M Files or Directories Accessible to External Parties	<0:3.12-9.module+el8.4.0+557+48ba8b2f
M Resource Exhaustion	<0:3.12-9.module+el8.4.0+557+48ba8b2f
M Use of Incorrectly-Resolved Name or Reference	<0:3.12-9.module+el8.4.0+557+48ba8b2f
H Directory Traversal	<0:3.12-9.module+el8.4.0+557+48ba8b2f
M Improper Cross-boundary Removal of Sensitive Data	<0:3.15-1.module+el8.6.0+783+10209741
M Race Condition	<0:3.15-3.module+el8.6.0+1054+50b00ff4
M Origin Validation Error	<0:3.15-1.module+el8.6.0+783+10209741
M NULL Pointer Dereference	<0:3.15-1.module+el8.6.0+783+10209741
H Incorrect Authorization	<0:3.12-9.module+el8.4.0+557+48ba8b2f
H Race Condition	<0:3.12-9.module+el8.4.0+557+48ba8b2f
M Improper Locking	<0:3.15-3.module+el8.6.0+1054+50b00ff4
M Incorrect Default Permissions	<0:3.15-1.module+el8.6.0+783+10209741
H Incorrect Default Permissions	<0:3.15-3.module+el8.6.0+1054+50b00ff4
M Incorrect Default Permissions	<0:3.15-1.module+el8.6.0+783+10209741
H Allocation of Resources Without Limits or Throttling	<0:3.15-3.module+el8.6.0+1054+50b00ff4
H Improper Privilege Management	<0:3.15-3.module+el8.6.0+1054+50b00ff4
M Improper Cross-boundary Removal of Sensitive Data	<0:3.12-9.module+el8.4.0+557+48ba8b2f
M CVE-2022-32148	<0:3.15-1.module+el8.6.0+783+10209741
M Uncontrolled Recursion	<0:3.15-1.module+el8.6.0+783+10209741
M Uncontrolled Recursion	<0:3.15-1.module+el8.6.0+783+10209741
M Uncontrolled Recursion	<0:3.15-1.module+el8.6.0+783+10209741
M Uncontrolled Recursion	<0:3.15-1.module+el8.6.0+783+10209741
M Uncontrolled Recursion	<0:3.15-1.module+el8.6.0+783+10209741
M Uncontrolled Recursion	<0:3.15-1.module+el8.6.0+783+10209741
M HTTP Request Smuggling	<0:3.15-1.module+el8.6.0+783+10209741
L Placement of User into Incorrect Group	<0:3.15-3.module+el8.6.0+1054+50b00ff4
M Placement of User into Incorrect Group	<0:3.15-3.module+el8.6.0+1054+50b00ff4
M Incorrect Default Permissions	<0:3.15-3.module+el8.6.0+1054+50b00ff4
M CVE-2022-27191	<0:3.15-3.module+el8.6.0+1054+50b00ff4
M Allocation of Resources Without Limits or Throttling	<0:3.15-3.module+el8.6.0+1054+50b00ff4
M Access of Resource Using Incompatible Type ('Type Confusion')	<0:3.15-3.module+el8.6.0+1054+50b00ff4

Vulnerability

Vulnerable Version

Improper Privilege Management