CVE-2022-24407
HighAdvisory
Published 22 Feb 2022In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.8
- base score, highest
- EPSS
- 0.041
- 90th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 747
- of 17,787 indexed, latest versions
- Container images
- 700
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: cyrus-sasl security update
Carried by container images the latest versions of 747 of 17,787 indexed charts deploy, on 700 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| cyrus-sasl2deb | 2.1.25.dfsg1-17build1, 2.1.26.dfsg1-14build1, 2.1.26.dfsg1-14ubuntu0.1, 2.1.26.dfsg1-14ubuntu0.2+9 more | 2.1.25.dfsg1-17ubuntu0.1~esm2, 2.1.26.dfsg1-14ubuntu0.2+esm1, 2.1.27+dfsg-1+deb10u2, 2.1.27+dfsg-2.1+deb11u1+3 more | 536 |
| cyrus-saslrpm | 2.1.26-5.7.1, 2.1.26-23.el7, 2.1.27-0.3rc7.el8, 2.1.27-1.el8+3 more | 0:2.1.26-24.el7_9, 0:2.1.27-6.el8_5, 2.1.26-5.10.1 | 90 |
| cyrus-saslapk | 2.1.27-r6, 2.1.27-r10, 2.1.27-r12, 2.1.27-r14 | 2.1.28-r0 | 74 |
- OSV records
- ALPINE-CVE-2022-24407RHSA-2022:0658RHSA-2022:0666UBUNTU-CVE-2022-24407DLA-2931-1DSA-5087-1SUSE-SU-2022:0702-1
- Also known as
- RHSA-2022:0668, RHSA-2022:0730, RHSA-2022:0731, USN-5301-1, USN-5301-2
Charts affected
747 by stars
Container images carrying it
700 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | e28e0e7de11b | cyrus-sasl2 | 2.1.27+dfsg-2ubuntu0.1 | 1 |
| ghcr.io/ | 01563adc95fd | cyrus-sasl2 | 2.1.27+dfsg-2ubuntu0.1 | 1 |
| ghcr.io/ | 2b92df1143b9 | cyrus-sasl2 | 2.1.27+dfsg-2ubuntu0.1 | 1 |
| ghcr.io/ | 600221f0f43f | cyrus-sasl2 | 2.1.27+dfsg-2ubuntu0.1 | 1 |
| ghcr.io/ | a85e03d8bc1d | cyrus-sasl2 | 2.1.27+dfsg-2ubuntu0.1 | 1 |
| ghcr.io/ | 451706815103 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 | 1 |
| ghcr.io/ | 6b4103d88dbb | cyrus-sasl2 | 2.1.27+dfsg-2.1+deb11u1 | 1 |
| ghcr.io/ | baa4fa9549dc | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3ubuntu2.4 | 1 |
| ghcr.io/ | 605b6d544028 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3ubuntu2.4 | 1 |
| ghcr.io/ | 763daf9caf8e | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 | 1 |
| ghcr.io/ | 69423a100fab | cyrus-sasl2 | 2.1.27+dfsg-2.1+deb11u1 | 1 |
| ghcr.io/ | 9e08148e1055 | cyrus-sasl2 | 2.1.27+dfsg-2.1+deb11u1 | 1 |
| ghcr.io/ | 1c7a78c54f77 | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 1 |
| ghcr.io/ | ab8e2f583e56 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 | 1 |
| ghcr.io/ | 88423e422ea8 | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 1 |
| ghcr.io/ | 1702fc9df79f | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 1 |
| ghcr.io/ | b24e63efd841 | cyrus-sasl | 2.1.28-r0 | 1 |
| mcr.microsoft.com/ | e1e9cf5297a6 | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 1 |
| public.ecr.aws/ | 573779e57fae | cyrus-sasl2 | 2.1.27+dfsg-2ubuntu0.1 | 1 |
| quay.io/ | cdefc81c6b2e | cyrus-sasl | 0:2.1.27-6.el8_5 | 1 |
| quay.io/ | 10df27bc5560 | cyrus-sasl | 0:2.1.27-6.el8_5 | 1 |
| quay.io/ | 5d25d47d6e17 | cyrus-sasl | 2.1.28-r0 | 1 |
| quay.io/ | a88add0f8c93 | cyrus-sasl | 2.1.28-r0 | 1 |
| quay.io/ | a3b9a07648b6 | cyrus-sasl | 0:2.1.27-6.el8_5 | 1 |
| quay.io/ | fae21f06131f | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 1 |
| quay.io/ | bb40472e4ff5 | cyrus-sasl | 0:2.1.27-6.el8_5 | 1 |
| quay.io/ | ea838e5b4051 | cyrus-sasl | 0:2.1.27-6.el8_5 | 1 |
| quay.io/ | 7a4b9fedc724 | cyrus-sasl | 0:2.1.27-6.el8_5 | 1 |
| quay.io/ | 01c3b7acb301 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 | 1 |
| quay.io/ | 3029dc0f1d38 | cyrus-sasl | 0:2.1.27-6.el8_5 | 1 |
| quay.io/ | c2851757eca4 | cyrus-sasl | 0:2.1.27-6.el8_5 | 1 |
| quay.io/ | 99ccdfd543e1 | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 1 |
| quay.io/ | a1c3843b03bc | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2+esm1 | 1 |
| quay.io/ | 107a7c73af59 | cyrus-sasl | 0:2.1.27-6.el8_5 | 1 |
| quay.io/ | 6722d5041b47 | cyrus-sasl | 0:2.1.27-6.el8_5 | 1 |
| quay.io/ | 0bbe8b451fa3 | cyrus-sasl | 0:2.1.27-6.el8_5 | 1 |
| quay.io/ | a8b21cec412c | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 1 |
| quay.io/ | 9a8d95ca0bd9 | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 1 |
| quay.io/ | c6a934439421 | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2+esm1 | 1 |
| quay.io/ | 89ee6493af89 | cyrus-sasl | 0:2.1.27-6.el8_5 | 1 |
| quay.io/ | 3207f957e80c | cyrus-sasl | 2.1.28-r0 | 1 |
| quay.io/ | 4b188259267e | cyrus-sasl | 2.1.28-r0 | 1 |
| quay.io/ | cad83090c58f | cyrus-sasl | 2.1.28-r0 | 1 |
| quay.io/ | 6ba82beff18e | cyrus-sasl | 0:2.1.27-6.el8_5 | 1 |
| registry.gitlab.com/ | cf72810d33f5 | cyrus-sasl | 0:2.1.27-6.el8_5 | 1 |
| registry.gitlab.com/ | 36b19b72120e | cyrus-sasl | 0:2.1.27-6.el8_5 | 1 |
| registry.gitlab.com/ | f6385712935f | cyrus-sasl2 | 2.1.27+dfsg-2ubuntu0.1 | 1 |
| registry.gitlab.com/ | f21f19346b29 | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 1 |
| registry.gitlab.com/ | 4eaf9c911f33 | cyrus-sasl2 | 2.1.27+dfsg-2.1+deb11u1 | 1 |
| registry.gitlab.com/ | 0886cbbc5f95 | cyrus-sasl2 | 2.1.27+dfsg-2.1+deb11u1 | 1 |