PatchTheCVEcray vulnerabilities
Recent CVEs affecting cray products. 1 tracked.
cray has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2014-12-27. Highest priority: CVE-2014-0748 (score 37/100).
- CVE-2014-0748 HIGH 7.2 UPGRADE apinit on Cray devices with CLE before 4.2.UP02 and 5.x before 5.1.UP00 does not use alpsauth data to validate
FAQ
How do I fix cray vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cray being exploited right now?
None of the tracked cray CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cray CVE should I patch first?
CVE-2014-0748 currently ranks highest (37/100): apinit on Cray devices with CLE before 4.2.UP02 and 5.x before 5.1.UP00 does not use alpsauth data to validate.