github.com/cri-o/cri-o

7 results · Clear filters · Feed

• High 7.4
  CVE-2024-8676

  Cri-o: checkpoint restore can be triggered from different namespaces

  A vulnerability was found in CRI-O, where it can be requested to take a checkpoint archive of a container and later be asked to restore it. When it does that restoration, it attempts to restore the mounts from the restore archive instead of the pod request. A…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat OpenShift Container Platform 4 Linux Azure Linux Go
  Nov 26, 2024
• High 8.1
  CVE-2024-5154

  Cri-o: malicious container can create symlink on host

  A flaw was found in cri-o. A malicious container can create a symbolic link to arbitrary files on the host via directory traversal (“../“). This flaw allows the container to read and write to arbitrary files on the host system.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat OpenShift Container Platform 4.14 Linux Go
  Jun 12, 2024
• High 7.2
  CVE-2024-3154

  Cri-o: arbitrary command injection via pod annotation

  A flaw was found in cri-o, where an arbitrary systemd property can be injected via a Pod annotation. Any user who can create a pod with an arbitrary annotation may perform an arbitrary action on the host system.

  Red Hat Red Hat OpenShift Container Platform 4.14 Red Hat OpenShift Container Platform 4.15 Red Hat OpenShift Container Platform 4.13 Azure Linux Wolfi Go
  Apr 26, 2024
• High 7.8
  CVE-2022-4318

  Cri-o: /etc/passwd tampering privesc

  A vulnerability was found in cri-o. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable.

  Red Hat Red Hat Enterprise Linux 9 Red Hat OpenShift Container Platform 4.12 Red Hat OpenShift Container Platform 4.11 Linux Azure Linux Alpine Go
  Sep 25, 2023
• High 7.1
  CVE-2022-2995

  CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure

  Incorrect handling of the supplementary groups in the CRI-O container engine might lead to sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set acc…

  cri-o github.com/cri-o/cri-o Azure Linux Go
  Sep 19, 2022
• High 7.5
  CVE-2022-1708

  Node DOS by way of memory exhaustion through ExecSync request in CRI-O

  A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API. The ExecSync request runs commands in a container and logs the output of the command. This output is then read by CRI-O after co…

  cri-o github.com/cri-o/cri-o cri-o Azure Linux Alpine Go
  Jun 7, 2022
• High 8.8
  CVE-2022-0811 Public exploit EPSS 19%

  Code Injection in CRI-O

  A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime to achieve a container escape and arbitrary code execution as root on the cluster no…

  cri-o github.com/cri-o/cri-o cri-o Azure Linux Alpine Go
  Mar 16, 2022