CVE-2022-24407
HighAdvisory
Published 22 Feb 2022In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.8
- base score, highest
- EPSS
- 0.041
- 90th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 744
- of 17,781 indexed, latest versions
- Container images
- 697
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: cyrus-sasl security update
Carried by container images the latest versions of 744 of 17,781 indexed charts deploy, on 697 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| cyrus-sasl2deb | 2.1.25.dfsg1-17build1, 2.1.26.dfsg1-14build1, 2.1.26.dfsg1-14ubuntu0.1, 2.1.26.dfsg1-14ubuntu0.2+9 more | 2.1.25.dfsg1-17ubuntu0.1~esm2, 2.1.26.dfsg1-14ubuntu0.2+esm1, 2.1.27+dfsg-1+deb10u2, 2.1.27+dfsg-2.1+deb11u1+3 more | 533 |
| cyrus-saslrpm | 2.1.26-5.7.1, 2.1.26-23.el7, 2.1.27-0.3rc7.el8, 2.1.27-1.el8+3 more | 0:2.1.26-24.el7_9, 0:2.1.27-6.el8_5, 2.1.26-5.10.1 | 90 |
| cyrus-saslapk | 2.1.27-r6, 2.1.27-r10, 2.1.27-r12, 2.1.27-r14 | 2.1.28-r0 | 74 |
- OSV records
- ALPINE-CVE-2022-24407RHSA-2022:0658RHSA-2022:0666UBUNTU-CVE-2022-24407DLA-2931-1DSA-5087-1SUSE-SU-2022:0702-1
- Also known as
- RHSA-2022:0668, RHSA-2022:0730, RHSA-2022:0731, USN-5301-1, USN-5301-2
Charts affected
744 by stars
Container images carrying it
697 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| gotson/ | 9b15ea6bfc30 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3ubuntu2.4 | 1 |
| gradiant/ | e3bf364fe713 | cyrus-sasl2 | 2.1.27+dfsg-2.1+deb11u1 | 1 |
| grafana/ | 104f434d47c8 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 | 1 |
| grafana/ | 9e7fe9c7903a | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 | 1 |
| grafana/ | a6b37f9afdd9 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 | 1 |
| grafana/ | b5591419cfa3 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 | 1 |
| graphiteapp/ | 04a0037cc2ae | cyrus-sasl | 2.1.28-r0 | 1 |
| guacamole/ | 333a7f40c145 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 | 1 |
| guacamole/ | 739cb6820ae8 | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 1 |
| guacamole/ | 2288530a4d1c | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 1 |
| ha33ona/ | 6affdfc644d0 | cyrus-sasl2 | 2.1.27+dfsg-2.1+deb11u1 | 1 |
| halkeye/ | 53eb2b3cd4cb | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 | 1 |
| halkeye/ | 3c734dde4052 | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 1 |
| halkeye/ | 77b05e95fdb5 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 | 1 |
| haugene/ | 059216cfae4b | cyrus-sasl2 | 2.1.27+dfsg-2ubuntu0.1 | 1 |
| haveagitgat/ | 1e3f9328327d | cyrus-sasl2 | 2.1.27+dfsg-2ubuntu0.1 | 1 |
| honoki/ | 07c4ea597019 | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 1 |
| huginn/ | c794eddc7b47 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3ubuntu2.4 | 1 |
| hyperledger/ | c65891b6c237 | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2+esm1 | 1 |
| i4trust/ | 3e77858e1219 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 | 1 |
| ibmcom/ | ce9d2a564273 | cyrus-sasl | 0:2.1.26-24.el7_9 | 1 |
| ibmcom/ | ee4624ba513d | cyrus-sasl | 0:2.1.26-24.el7_9 | 1 |
| ibmcom/ | 240ff499eb5b | cyrus-sasl | 0:2.1.26-24.el7_9 | 1 |
| ibmcom/ | e2a86997b36b | cyrus-sasl | 0:2.1.26-24.el7_9 | 1 |
| ibmcom/ | a6748792da26 | cyrus-sasl | 0:2.1.26-24.el7_9 | 1 |
| ibmcom/ | 02d882f2836e | cyrus-sasl | 0:2.1.26-24.el7_9 | 1 |
| ibmcom/ | 5441dba2fa00 | cyrus-sasl | 0:2.1.26-24.el7_9 | 1 |
| ibmcom/ | e31ff09e8aad | cyrus-sasl | 0:2.1.26-24.el7_9 | 1 |
| ibmcom/ | 58548034cf55 | cyrus-sasl | 0:2.1.26-24.el7_9 | 1 |
| ibmcom/ | b138f1eac0b1 | cyrus-sasl | 0:2.1.26-24.el7_9 | 1 |
| ibmcom/ | b8e8df11072d | cyrus-sasl | 0:2.1.26-24.el7_9 | 1 |
| ibmcom/ | c796a4c693b4 | cyrus-sasl | 0:2.1.27-6.el8_5 | 1 |
| ibmcom/ | 9c73804b37a3 | cyrus-sasl | 0:2.1.27-6.el8_5 | 1 |
| ibmcom/ | d28bf361327a | cyrus-sasl | 0:2.1.27-6.el8_5 | 1 |
| ibmcom/ | 9a766604a73b | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 | 1 |
| ibmcom/ | 7e4dc1e27cdf | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2+esm1 | 1 |
| ibmcom/ | b5d8c6714dbc | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2+esm1 | 1 |
| ibmcom/ | e17bdccc5030 | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2+esm1 | 1 |
| ibmcom/ | cd5065df7304 | cyrus-sasl | 0:2.1.27-6.el8_5 | 1 |
| ibmcom/ | 395e60cc6e3d | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3ubuntu2.4 | 1 |
| ibmcom/ | 0762ab1df6c1 | cyrus-sasl | 0:2.1.26-24.el7_9 | 1 |
| ibmcom/ | 28ae40e05980 | cyrus-sasl | 0:2.1.26-24.el7_9 | 1 |
| improwised/ | 97280b55cbd4 | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 1 |
| instrumentisto/ | 6c25f154177c | cyrus-sasl | 2.1.28-r0 | 1 |
| istio/ | 2232f365aed6 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3ubuntu2.4 | 1 |
| istio/ | 268ab879ea51 | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2+esm1 | 1 |
| istio/ | 655eefa11c84 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3ubuntu2.4 | 1 |
| istio/ | 6cfce8a071b9 | cyrus-sasl2 | 2.1.27+dfsg-2ubuntu0.1 | 1 |
| istio/ | 294ca55bd1cc | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3ubuntu2.4 | 1 |
| istio/ | c09319753454 | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2+esm1 | 1 |