# CVE-2024-23327: cri-o: cri-o [1.25.5-2] - Address CVE-2024-24786 cri-tools [1.25.0-4] - Address CVE-2024-24786 etcd [3.5.9-4] - Address pr... CVE-2024-23327 is fixed in 25 products on 1 platform, first by ALAS2023-2024-543, released February 29, 2024. It is not reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/cve/CVE-2024-23327 - Priority: High - CVSS: 7.5 (IMPORTANT) - EPSS: 0.0069 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Feb 29, 2024 ## Description cri-o [1.25.5-2] - Address CVE-2024-24786 cri-tools [1.25.0-4] - Address CVE-2024-24786 etcd [3.5.9-4] - Address protobuf [CVE-2024-24786] [3.5.9-3] - Address CVE-2023-39326 by upgrading golang to version 1.20.12 istio [1.16.7-4] - Address protobuf [CVE-2024-24786] - Backport from 1.19.7 to address CVE-2024-23322, CVE-2024-23323, CVE-2024-23324, CVE-2024-23325, CVE-2024-23327 kubernetes [1.25.16-2] - Fixed CoreDNS version check [1.25.16-1] - Added Oracle specific build files for Kubernetes olcne [1.6.7-3] - Fixed unable to deploy new module(s) using config file containing already existing modules - Update Istio-1.16.7 to address CVE-2024-24786, CVE-2024-23322, CVE-2024-23323, CVE-2024-23324, CVE-2024-23325, CVE-2024-23327 ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | cri-o ol 8 | 0:1.25.5-2.el8 | [ELSA-2024-12328](https://patchblox.com/security/data/fix/linux/elsa-2024-12328.md) | Apr 16, 2024 | | Linux | cri-o ol 9 | 0:1.26.4-2.el9 | [ELSA-2024-12347](https://patchblox.com/security/data/fix/linux/elsa-2024-12347.md) | Apr 26, 2024 | | Linux | cri-tools ol 8 | 0:1.25.0-4.el8 | [ELSA-2024-12328](https://patchblox.com/security/data/fix/linux/elsa-2024-12328.md) | Apr 16, 2024 | | Linux | cri-tools ol 9 | 0:1.26.1-5.el9 | [ELSA-2024-12347](https://patchblox.com/security/data/fix/linux/elsa-2024-12347.md) | Apr 26, 2024 | | Linux | ecs-service-connect-agent amzn 2023 | v1.27.3.0-1.amzn2023 | [ALAS2023-2024-543](https://patchblox.com/security/data/fix/linux/alas2023-2024-543.md) | Feb 29, 2024 | | Linux | etcd ol 8 | 0:3.5.9-4.el8 | [ELSA-2024-12328](https://patchblox.com/security/data/fix/linux/elsa-2024-12328.md) | Apr 16, 2024 | | Linux | etcd ol 9 | 0:3.5.10-3.el9 | [ELSA-2024-12347](https://patchblox.com/security/data/fix/linux/elsa-2024-12347.md) | Apr 26, 2024 | | Linux | istio ol 8 | 0:1.16.7-4.el8 | [ELSA-2024-12328](https://patchblox.com/security/data/fix/linux/elsa-2024-12328.md) | Apr 16, 2024 | | Linux | istio ol 9 | 0:1.17.8-3.el9 | [ELSA-2024-12347](https://patchblox.com/security/data/fix/linux/elsa-2024-12347.md) | Apr 26, 2024 | | Linux | istio-istioctl ol 8 | 0:1.16.7-4.el8 | [ELSA-2024-12328](https://patchblox.com/security/data/fix/linux/elsa-2024-12328.md) | Apr 16, 2024 | | Linux | istio-istioctl ol 9 | 0:1.17.8-3.el9 | [ELSA-2024-12347](https://patchblox.com/security/data/fix/linux/elsa-2024-12347.md) | Apr 26, 2024 | | Linux | kubeadm ol 8 | 0:1.25.16-2.el8 | [ELSA-2024-12328](https://patchblox.com/security/data/fix/linux/elsa-2024-12328.md) | Apr 16, 2024 | | Linux | kubeadm ol 9 | 0:1.26.15-1.el9 | [ELSA-2024-12347](https://patchblox.com/security/data/fix/linux/elsa-2024-12347.md) | Apr 26, 2024 | | Linux | kubectl ol 8 | 0:1.25.16-2.el8 | [ELSA-2024-12328](https://patchblox.com/security/data/fix/linux/elsa-2024-12328.md) | Apr 16, 2024 | | Linux | kubectl ol 9 | 0:1.26.15-1.el9 | [ELSA-2024-12347](https://patchblox.com/security/data/fix/linux/elsa-2024-12347.md) | Apr 26, 2024 | | Linux | kubelet ol 8 | 0:1.25.16-2.el8 | [ELSA-2024-12328](https://patchblox.com/security/data/fix/linux/elsa-2024-12328.md) | Apr 16, 2024 | | Linux | kubelet ol 9 | 0:1.26.15-1.el9 | [ELSA-2024-12347](https://patchblox.com/security/data/fix/linux/elsa-2024-12347.md) | Apr 26, 2024 | | Linux | olcne-agent ol 8 | 0:1.6.7-3.el8 | [ELSA-2024-12328](https://patchblox.com/security/data/fix/linux/elsa-2024-12328.md) | Apr 16, 2024 | | Linux | olcne-agent ol 9 | 0:1.7.7-2.el9 | [ELSA-2024-12347](https://patchblox.com/security/data/fix/linux/elsa-2024-12347.md) | Apr 26, 2024 | | Linux | olcne-api-server ol 8 | 0:1.6.7-3.el8 | [ELSA-2024-12328](https://patchblox.com/security/data/fix/linux/elsa-2024-12328.md) | Apr 16, 2024 | | Linux | olcne-api-server ol 9 | 0:1.7.7-2.el9 | [ELSA-2024-12347](https://patchblox.com/security/data/fix/linux/elsa-2024-12347.md) | Apr 26, 2024 | | Linux | olcne-calico-chart ol 8 | 0:1.6.7-3.el8 | [ELSA-2024-12328](https://patchblox.com/security/data/fix/linux/elsa-2024-12328.md) | Apr 16, 2024 | | Linux | olcne-calico-chart ol 9 | 0:1.7.7-2.el9 | [ELSA-2024-12347](https://patchblox.com/security/data/fix/linux/elsa-2024-12347.md) | Apr 26, 2024 | | Linux | olcne-gluster-chart ol 8 | 0:1.6.7-3.el8 | [ELSA-2024-12328](https://patchblox.com/security/data/fix/linux/elsa-2024-12328.md) | Apr 16, 2024 | | Linux | olcne-gluster-chart ol 9 | 0:1.7.7-2.el9 | [ELSA-2024-12347](https://patchblox.com/security/data/fix/linux/elsa-2024-12347.md) | Apr 26, 2024 | | Linux | olcne-grafana-chart ol 8 | 0:1.6.7-3.el8 | [ELSA-2024-12328](https://patchblox.com/security/data/fix/linux/elsa-2024-12328.md) | Apr 16, 2024 | | Linux | olcne-grafana-chart ol 9 | 0:1.7.7-2.el9 | [ELSA-2024-12347](https://patchblox.com/security/data/fix/linux/elsa-2024-12347.md) | Apr 26, 2024 | | Linux | olcne-istio-chart ol 8 | 0:1.6.7-3.el8 | [ELSA-2024-12328](https://patchblox.com/security/data/fix/linux/elsa-2024-12328.md) | Apr 16, 2024 | | Linux | olcne-istio-chart ol 9 | 0:1.7.7-2.el9 | [ELSA-2024-12347](https://patchblox.com/security/data/fix/linux/elsa-2024-12347.md) | Apr 26, 2024 | | Linux | olcne-kubevirt-chart ol 8 | 0:1.7.7-2.el8 | [ELSA-2024-12348](https://patchblox.com/security/data/fix/linux/elsa-2024-12348.md) | Apr 26, 2024 | | Linux | olcne-kubevirt-chart ol 9 | 0:1.7.7-2.el9 | [ELSA-2024-12347](https://patchblox.com/security/data/fix/linux/elsa-2024-12347.md) | Apr 26, 2024 | | Linux | olcne-metallb-chart ol 8 | 0:1.6.7-3.el8 | [ELSA-2024-12328](https://patchblox.com/security/data/fix/linux/elsa-2024-12328.md) | Apr 16, 2024 | | Linux | olcne-metallb-chart ol 9 | 0:1.7.7-2.el9 | [ELSA-2024-12347](https://patchblox.com/security/data/fix/linux/elsa-2024-12347.md) | Apr 26, 2024 | | Linux | olcne-multus-chart ol 8 | 0:1.6.7-3.el8 | [ELSA-2024-12328](https://patchblox.com/security/data/fix/linux/elsa-2024-12328.md) | Apr 16, 2024 | | Linux | olcne-multus-chart ol 9 | 0:1.7.7-2.el9 | [ELSA-2024-12347](https://patchblox.com/security/data/fix/linux/elsa-2024-12347.md) | Apr 26, 2024 | | Linux | olcne-nginx ol 8 | 0:1.6.7-3.el8 | [ELSA-2024-12328](https://patchblox.com/security/data/fix/linux/elsa-2024-12328.md) | Apr 16, 2024 | | Linux | olcne-nginx ol 9 | 0:1.7.7-2.el9 | [ELSA-2024-12347](https://patchblox.com/security/data/fix/linux/elsa-2024-12347.md) | Apr 26, 2024 | | Linux | olcne-oci-ccm-chart ol 8 | 0:1.6.7-3.el8 | [ELSA-2024-12328](https://patchblox.com/security/data/fix/linux/elsa-2024-12328.md) | Apr 16, 2024 | | Linux | olcne-oci-ccm-chart ol 9 | 0:1.7.7-2.el9 | [ELSA-2024-12347](https://patchblox.com/security/data/fix/linux/elsa-2024-12347.md) | Apr 26, 2024 | | Linux | olcne-olm-chart ol 8 | 0:1.6.7-3.el8 | [ELSA-2024-12328](https://patchblox.com/security/data/fix/linux/elsa-2024-12328.md) | Apr 16, 2024 | | Linux | olcne-olm-chart ol 9 | 0:1.7.7-2.el9 | [ELSA-2024-12347](https://patchblox.com/security/data/fix/linux/elsa-2024-12347.md) | Apr 26, 2024 | | Linux | olcne-prometheus-chart ol 8 | 0:1.6.7-3.el8 | [ELSA-2024-12328](https://patchblox.com/security/data/fix/linux/elsa-2024-12328.md) | Apr 16, 2024 | | Linux | olcne-prometheus-chart ol 9 | 0:1.7.7-2.el9 | [ELSA-2024-12347](https://patchblox.com/security/data/fix/linux/elsa-2024-12347.md) | Apr 26, 2024 | | Linux | olcne-rook-chart ol 8 | 0:1.7.7-2.el8 | [ELSA-2024-12348](https://patchblox.com/security/data/fix/linux/elsa-2024-12348.md) | Apr 26, 2024 | | Linux | olcne-rook-chart ol 9 | 0:1.7.7-2.el9 | [ELSA-2024-12347](https://patchblox.com/security/data/fix/linux/elsa-2024-12347.md) | Apr 26, 2024 | | Linux | olcne-utils ol 8 | 0:1.6.7-3.el8 | [ELSA-2024-12328](https://patchblox.com/security/data/fix/linux/elsa-2024-12328.md) | Apr 16, 2024 | | Linux | olcne-utils ol 9 | 0:1.7.7-2.el9 | [ELSA-2024-12347](https://patchblox.com/security/data/fix/linux/elsa-2024-12347.md) | Apr 26, 2024 | | Linux | olcnectl ol 8 | 0:1.6.7-3.el8 | [ELSA-2024-12328](https://patchblox.com/security/data/fix/linux/elsa-2024-12328.md) | Apr 16, 2024 | | Linux | olcnectl ol 9 | 0:1.7.7-2.el9 | [ELSA-2024-12347](https://patchblox.com/security/data/fix/linux/elsa-2024-12347.md) | Apr 26, 2024 | --- Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.