CVE-2022-24407
HighAdvisory
Published 22 Feb 2022In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.8
- base score, highest
- EPSS
- 0.041
- 90th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 744
- of 17,781 indexed, latest versions
- Container images
- 697
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: cyrus-sasl security update
Carried by container images the latest versions of 744 of 17,781 indexed charts deploy, on 697 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| cyrus-sasl2deb | 2.1.25.dfsg1-17build1, 2.1.26.dfsg1-14build1, 2.1.26.dfsg1-14ubuntu0.1, 2.1.26.dfsg1-14ubuntu0.2+9 more | 2.1.25.dfsg1-17ubuntu0.1~esm2, 2.1.26.dfsg1-14ubuntu0.2+esm1, 2.1.27+dfsg-1+deb10u2, 2.1.27+dfsg-2.1+deb11u1+3 more | 533 |
| cyrus-saslrpm | 2.1.26-5.7.1, 2.1.26-23.el7, 2.1.27-0.3rc7.el8, 2.1.27-1.el8+3 more | 0:2.1.26-24.el7_9, 0:2.1.27-6.el8_5, 2.1.26-5.10.1 | 90 |
| cyrus-saslapk | 2.1.27-r6, 2.1.27-r10, 2.1.27-r12, 2.1.27-r14 | 2.1.28-r0 | 74 |
- OSV records
- ALPINE-CVE-2022-24407RHSA-2022:0658RHSA-2022:0666UBUNTU-CVE-2022-24407DLA-2931-1DSA-5087-1SUSE-SU-2022:0702-1
- Also known as
- RHSA-2022:0668, RHSA-2022:0730, RHSA-2022:0731, USN-5301-1, USN-5301-2
Charts affected
744 by stars
Container images carrying it
697 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| dellcloud/ | 6ba7b22caacd | cyrus-sasl2 | 2.1.27+dfsg-2ubuntu0.1 | 79 |
| flyway/ | 22d97ceb0c47 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3ubuntu2.4 | 79 |
| library/ | 20575ecebe62 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 | 11 |
| oomk8s/ | 875814cc853d | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2+esm1 | 11 |
| gradiant/ | 3b28784ba41f | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 7 |
| library/ | ce85468c5bad | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 | 7 |
| osixia/ | 18742e9c449c | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 7 |
| library/ | b7a76ec06f68 | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 6 |
| oomk8s/ | 7daa08b81954 | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2+esm1 | 6 |
| library/ | 0fd2898dc1c9 | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 5 |
| library/ | df13abe416e3 | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 5 |
| osixia/ | d112b82be133 | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 5 |
| grafana/ | ab415470454b | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 | 4 |
| hyperledger/ | 4ce6f43ded2e | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2+esm1 | 4 |
| hyperledger/ | f6c724592abf | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2+esm1 | 4 |
| kodekloud/ | 741e3aaaa812 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 | 4 |
| library/ | 2f561d372672 | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 4 |
| library/ | 628741415fc9 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3ubuntu2.4 | 4 |
| library/ | 6efa05203990 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3ubuntu2.4 | 4 |
| oscarsotosanchez/ | 6e2e1279126b | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 | 4 |
| oscarsotosanchez/ | 911ec961d10b | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3ubuntu2.4 | 4 |
| osixia/ | 1ab629698ae0 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 | 4 |
| argoproj/ | 830e86cacefd | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 3 |
| bitnamilegacy/ | 804725facf91 | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 3 |
| cloudve/ | 4a3d7fae90bb | cyrus-sasl2 | 2.1.27+dfsg-2ubuntu0.1 | 3 |
| conduction/ | ee2121b569ac | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 3 |
| dgraph/ | 3b55ea83fffe | cyrus-sasl2 | 2.1.27+dfsg-2ubuntu0.1 | 3 |
| frankescobar/ | 4ebd8b4ef340 | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 3 |
| library/ | e1b0fd480a11 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 | 3 |
| library/ | 3162a6ead070 | cyrus-sasl2 | 2.1.27+dfsg-2.1+deb11u1 | 3 |
| minio/ | bd11edda91f3 | cyrus-sasl | 0:2.1.27-6.el8_5 | 3 |
| omecproject/ | d59ccb138ffb | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2+esm1 | 3 |
| selenium/ | 02f251d48d5f | cyrus-sasl2 | 2.1.27+dfsg-2ubuntu0.1 | 3 |
| xenondb/ | 0e26872a2b67 | cyrus-sasl2 | 2.1.27+dfsg-2ubuntu0.1 | 3 |
| quay.io/ | 75fb847ac045 | cyrus-sasl | 0:2.1.27-6.el8_5 | 3 |
| quay.io/ | 4c3b91bebd3d | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2+esm1 | 3 |
| quay.io/ | ef035ac10498 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 | 3 |
| quay.io/ | c68135620167 | cyrus-sasl | 0:2.1.27-6.el8_5 | 3 |
| amancevice/ | 12a0a9e66550 | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 2 |
| bitnamilegacy/ | 4fe2bd7b4036 | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u2 | 2 |
| fjvela/ | a8ebe5ca13fc | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 | 2 |
| fjvela/ | 3c840aebce22 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 | 2 |
| freeradius/ | 21c8bfa904d8 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3ubuntu2.4 | 2 |
| geoservercloud/ | 756559ee788a | cyrus-sasl2 | 2.1.27+dfsg-2ubuntu0.1 | 2 |
| geoservercloud/ | 99540eef78ad | cyrus-sasl2 | 2.1.27+dfsg-2ubuntu0.1 | 2 |
| geoservercloud/ | 5c254c53a357 | cyrus-sasl2 | 2.1.27+dfsg-2ubuntu0.1 | 2 |
| geoservercloud/ | c687b1cbc891 | cyrus-sasl2 | 2.1.27+dfsg-2ubuntu0.1 | 2 |
| geoservercloud/ | 5288f320cf36 | cyrus-sasl2 | 2.1.27+dfsg-2ubuntu0.1 | 2 |
| geoservercloud/ | a30a60ac6cd0 | cyrus-sasl2 | 2.1.27+dfsg-2ubuntu0.1 | 2 |
| grafana/ | d66b41cf7e05 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u2 | 2 |