PatchTheCVEirods vulnerabilities and fixes
Recent CVEs affecting irods, with upgrade or downgrade steps. 2 tracked.
irods has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2024-06-16. Highest priority: CVE-2024-38462 (score 52/100).
- CVE-2024-38462 CRITICAL 9.8 UPGRADE iRODS before 4.3.2 provides an msiSendMail function with a problematic dependency on the mail binary, such as
- CVE-2024-38461 HIGH 7.5 UPGRADE irodsServerMonPerf in iRODS before 4.3.2 attempts to proceed with use of a path even if it is not a directory.
FAQ
How do I fix irods vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is irods being exploited right now?
None of the tracked irods CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which irods CVE should I patch first?
CVE-2024-38462 currently ranks highest (52/100): iRODS before 4.3.2 provides an msiSendMail function with a problematic dependency on the mail binary, such as .