cri-o

3 results · Feed

• High 7.8
  CVE-2022-4318

  Cri-o: /etc/passwd tampering privesc

  A vulnerability was found in cri-o. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable.

  Red Hat Red Hat Enterprise Linux 9 Red Hat OpenShift Container Platform 4.12 Red Hat OpenShift Container Platform 4.11 Linux Azure Linux Alpine Go
  Sep 25, 2023
• High 7.5
  CVE-2022-1708

  Node DOS by way of memory exhaustion through ExecSync request in CRI-O

  A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API. The ExecSync request runs commands in a container and logs the output of the command. This output is then read by CRI-O after co…

  cri-o github.com/cri-o/cri-o cri-o Azure Linux Alpine Go
  Jun 7, 2022
• High 8.8
  CVE-2022-0811 Public exploit EPSS 19%

  Code Injection in CRI-O

  A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime to achieve a container escape and arbitrary code execution as root on the cluster no…

  cri-o github.com/cri-o/cri-o cri-o Azure Linux Alpine Go
  Mar 16, 2022