CVE-2022-24407
HighAdvisory
Published 22 Feb 2022In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.8
- base score, highest
- EPSS
- 0.041
- 90th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 744
- of 17,781 indexed, latest versions
- Container images
- 697
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: cyrus-sasl security update
Carried by container images the latest versions of 744 of 17,781 indexed charts deploy, on 697 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| cyrus-sasl2deb | 2.1.25.dfsg1-17build1, 2.1.26.dfsg1-14build1, 2.1.26.dfsg1-14ubuntu0.1, 2.1.26.dfsg1-14ubuntu0.2+9 more | 2.1.25.dfsg1-17ubuntu0.1~esm2, 2.1.26.dfsg1-14ubuntu0.2+esm1, 2.1.27+dfsg-1+deb10u2, 2.1.27+dfsg-2.1+deb11u1+3 more | 533 |
| cyrus-saslrpm | 2.1.26-5.7.1, 2.1.26-23.el7, 2.1.27-0.3rc7.el8, 2.1.27-1.el8+3 more | 0:2.1.26-24.el7_9, 0:2.1.27-6.el8_5, 2.1.26-5.10.1 | 90 |
| cyrus-saslapk | 2.1.27-r6, 2.1.27-r10, 2.1.27-r12, 2.1.27-r14 | 2.1.28-r0 | 74 |
- OSV records
- ALPINE-CVE-2022-24407RHSA-2022:0658RHSA-2022:0666UBUNTU-CVE-2022-24407DLA-2931-1DSA-5087-1SUSE-SU-2022:0702-1
- Also known as
- RHSA-2022:0668, RHSA-2022:0730, RHSA-2022:0731, USN-5301-1, USN-5301-2
Charts affected
744 by stars
Container images carrying it
697 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| alerta/ | 4786b9eaa606 | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 1 |
| alphayax/ | c284977f027a | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 | 1 |
| altinity/ | db7dde971407 | cyrus-sasl | 0:2.1.26-24.el7_9 | 1 |
| altinity/ | 85b4fdbae053 | cyrus-sasl | 0:2.1.26-24.el7_9 | 1 |
| amancevice/ | c8c04bfe3d66 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 | 1 |
| amartinm82/ | 1184353ff57b | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 1 |
| anchore/ | bde9eedf639d | cyrus-sasl | 0:2.1.27-6.el8_5 | 1 |
| anchore/ | ed9b3badd17c | cyrus-sasl | 0:2.1.27-6.el8_5 | 1 |
| apache/ | 9f895c8ae371 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 | 1 |
| apache/ | 090b7f87ec7f | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 1 |
| apache/ | 974efa2f21da | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 1 |
| apachepulsar/ | 3b262ab7a7d9 | cyrus-sasl2 | 2.1.27+dfsg-2ubuntu0.1 | 1 |
| apachepulsar/ | 4db6ff0b4045 | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 1 |
| apachepulsar/ | d056c89b7131 | cyrus-sasl2 | 2.1.27+dfsg-2ubuntu0.1 | 1 |
| apachepulsar/ | d538416d5afe | cyrus-sasl2 | 2.1.27+dfsg-2ubuntu0.1 | 1 |
| apache/ | b4ec8c18d079 | cyrus-sasl2 | 2.1.27+dfsg-2ubuntu0.1 | 1 |
| apache/ | 80530f0308a5 | cyrus-sasl2 | 2.1.27+dfsg-2ubuntu0.1 | 1 |
| apicurio/ | a97d67487532 | cyrus-sasl | 0:2.1.27-6.el8_5 | 1 |
| argoproj/ | b0230853357d | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 | 1 |
| asdkant/ | a23d8bf7c885 | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 1 |
| assistiot/ | db9361dad79b | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 1 |
| atomix/ | 7738ff4f5c63 | cyrus-sasl2 | 2.1.27+dfsg-2.1+deb11u1 | 1 |
| azhar008/ | a1e827b0adea | cyrus-sasl2 | 2.1.27+dfsg-2.1+deb11u1 | 1 |
| bastilimbach/ | 41b0835ab31e | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 1 |
| benbusby/ | f77f7e6e4ad2 | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 1 |
| beubi/ | a02c2e200920 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 | 1 |
| bitnamilegacy/ | e527fbf75dce | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 1 |
| bitnamilegacy/ | 50c5c23d5e8c | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 1 |
| bitnamilegacy/ | 3e51da56fc54 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 | 1 |
| bitnamilegacy/ | e3c9d6b4bc92 | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 1 |
| bitnamilegacy/ | c3f10b41989f | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 1 |
| bivas/ | 05545994f806 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 | 1 |
| blakeblackshear/ | ae269270ad9e | cyrus-sasl2 | 2.1.27+dfsg-2ubuntu0.1 | 1 |
| brannondorsey/ | 2f957f0839c2 | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 1 |
| browserless/ | c81ae5585b47 | cyrus-sasl2 | 2.1.27+dfsg-2ubuntu0.1 | 1 |
| bryanalves/ | 95f73dce8b21 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 | 1 |
| bryanalves/ | af47dfbb9413 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 | 1 |
| bsgrigorov/ | 45ab095f09c8 | cyrus-sasl | 0:2.1.27-6.el8_5 | 1 |
| camptocamp/ | acfafc308d88 | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 1 |
| camptocamp/ | 35c91d5fda04 | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 1 |
| camptocamp/ | bff736b15623 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 | 1 |
| camptocamp/ | 78b77c838569 | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 1 |
| cdignam/ | 5a6a55b39cee | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 1 |
| ceticasbl/ | 6c0aa7567145 | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 1 |
| ceticasbl/ | bc34ce180d0c | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 1 |
| cfcontainerization/ | 7366b11c5fa5 | cyrus-sasl | 2.1.26-5.10.1 | 1 |
| cfcontainerization/ | 43131dbc0c8f | cyrus-sasl | 2.1.26-5.10.1 | 1 |
| chetangautamm/ | b4b94155ff5a | cyrus-sasl2 | 2.1.25.dfsg1-17ubuntu0.1~esm2 | 1 |
| chetangautamm/ | e7f7049e1544 | cyrus-sasl2 | 2.1.27+dfsg-2ubuntu0.1 | 1 |
| cheyang/ | 46cc34755493 | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2+esm1 | 1 |