Skip to content
OpenAdvisories
High ELSA-2022-9229 1 CVE

Important: cri-o security update (Oracle Linux 7)

Published Mar 18, 2022 · Updated Mar 18, 2022

Ecosystem: Oracle Linux

Summary

[1.21.6-1]
- Added Oracle Specifile Files for cri-o

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 7 cri-o 0:1.21.6-1.el8

Vulnerabilities 1

  • High 8.8
    CVE-2022-0811 Public exploit EPSS 19%

    Code Injection in CRI-O

    A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime to achieve a container escape and arbitrary code execution as root on the cluster no…

    cri-o github.com/cri-o/cri-o cri-o Azure Linux Alpine Go