Skip to content
OpenAdvisories
High ELSA-2022-9719 1 CVE

Important: cri-o security update (Oracle Linux 7)

Published Aug 17, 2022 · Updated Aug 17, 2022

Ecosystem: Oracle Linux

Summary

[1.22.5-1]
- Addresses CVE-2022-1708

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 7 cri-o 0:1.22.5-1.el7

Vulnerabilities 1

  • High 7.5
    CVE-2022-1708

    Node DOS by way of memory exhaustion through ExecSync request in CRI-O

    A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API. The ExecSync request runs commands in a container and logs the output of the command. This output is then read by CRI-O after co…

    cri-o github.com/cri-o/cri-o cri-o Azure Linux Alpine Go