Skip to content
OpenAdvisories
High · 7.5 CVE-2022-1708 EUVD-2022-6034GHSA-fcm2-6c3h-pg6jGO-2022-0480

Node DOS by way of memory exhaustion through ExecSync request in CRI-O

Published Jun 7, 2022 · Updated Aug 3, 2024 · Assigned by redhat

Description

A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API. The ExecSync request runs commands in a container and logs the output of the command. This output is then read by CRI-O after command execution, and it is read in a manner where the entire file corresponding to the output of the command is read in. Thus, if the output of the command is large it is possible to exhaust the memory or the disk space of the node when CRI-O reads the output of the command. The highest threat from this vulnerability is system availability.

Affected products

VendorProductAffectedFixed
— CRI-O Affects cri-o <= 1.24.0, 1.23.2, 1.22.4, Fixed-in 1.24.1, 1.23.3, 1.22.5 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
RHEL 8 buildah +1 1.19.9-6.module+el8.7.0+16212+65e1b35f RHSA-2022:7529, RHSA-2022:7469, RHSA-2022:7457
RHEL 8 cockpit-podman 29-2.module+el8.7.0+16212+65e1b35f RHSA-2022:7529, RHSA-2022:7469, RHSA-2022:7457
RHEL 8 conmon 2:2.0.26-3.module+el8.7.0+16212+65e1b35f RHSA-2022:7529, RHSA-2022:7469, RHSA-2022:7457
RHEL 8 container-selinux 2:2.189.0-1.module+el8.7.0+16212+65e1b35f RHSA-2022:7529, RHSA-2022:7469, RHSA-2022:7457
RHEL 8 containernetworking-plugins 0.9.1-1.module+el8.7.0+16212+65e1b35f RHSA-2022:7529, RHSA-2022:7469, RHSA-2022:7457
RHEL 8 crit +2 3.15-1.module+el8.7.0+16212+65e1b35f RHSA-2022:7529, RHSA-2022:7469, RHSA-2022:7457
RHEL 8 criu-libs +1 3.15-3.module+el8.7.0+16520+2db5507d RHSA-2022:7469, RHSA-2022:7457
RHEL 8 crun 0.18-3.module+el8.7.0+16212+65e1b35f RHSA-2022:7529, RHSA-2022:7469, RHSA-2022:7457
RHEL 8 fuse-overlayfs 1.4.0-2.module+el8.7.0+16212+65e1b35f RHSA-2022:7529, RHSA-2022:7469, RHSA-2022:7457
RHEL 8 libslirp +1 4.3.1-1.module+el8.7.0+16212+65e1b35f RHSA-2022:7529, RHSA-2022:7469, RHSA-2022:7457
RHEL 8 netavark +1 2:1.0.1-35.module+el8.7.0+16520+2db5507d RHSA-2022:7469, RHSA-2022:7457
RHEL 8 oci-seccomp-bpf-hook 1.2.0-3.module+el8.7.0+16212+65e1b35f RHSA-2022:7529, RHSA-2022:7469, RHSA-2022:7457
RHEL 8 podman +5 3.0.1-13.module+el8.7.0+16212+65e1b35f RHSA-2022:7529, RHSA-2022:7469, RHSA-2022:7457
RHEL 8 podman-gvproxy 2:4.0.2-8.module+el8.7.0+16520+2db5507d RHSA-2022:7469, RHSA-2022:7457
RHEL 8 python-podman +1 4.0.0-1.module+el8.7.0+16520+2db5507d RHSA-2022:7469, RHSA-2022:7457
RHEL 8 runc 1.0.0-73.rc95.module+el8.7.0+16212+65e1b35f RHSA-2022:7529, RHSA-2022:7469, RHSA-2022:7457
RHEL 8 skopeo +2 1:1.2.4-2.module+el8.7.0+16212+65e1b35f RHSA-2022:7529, RHSA-2022:7469, RHSA-2022:7457
RHEL 8 slirp4netns 1.1.8-1.module+el8.7.0+16212+65e1b35f RHSA-2022:7529, RHSA-2022:7469, RHSA-2022:7457
RHEL 8 toolbox +1 0.0.99.3-0.5.module+el8.7.0+16520+2db5507d RHSA-2022:7529, RHSA-2022:7469, RHSA-2022:7457
RHEL 8 udica 0.2.4-1.module+el8.7.0+16212+65e1b35f RHSA-2022:7529, RHSA-2022:7469, RHSA-2022:7457
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat OpenShift 4 conmon 2:2.0.21-3.rhaos4.6.el7 RHSA-2022:4972, RHSA-2022:4965, RHSA-2022:4951
Red Hat OpenShift 4 cri-o 1.19.7-2.rhaos4.6.git3c20b65.el7 RHSA-2022:4972, RHSA-2022:4965, RHSA-2022:4951
Red Hat OpenShift 4 jenkins-2-plugins 4.6.1653312933-1.el8 RHSA-2022:4947
Red Hat OpenShift 3 cri-o 1.11.16-0.17.rhaos3.11.git4c0a8ad.el7 RHSA-2022:4999

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 8 buildah +1 1.19.9-6.module_el8.7.0+3297+1eb250cf ALSA-2022:7529, ALSA-2022:7469
AlmaLinux 8 cockpit-podman 29-2.module_el8.6.0+2876+9ed4eae2 ALSA-2022:7529, ALSA-2022:7469
AlmaLinux 8 conmon 2:2.0.26-3.module_el8.7.0+3297+1eb250cf ALSA-2022:7529, ALSA-2022:7469
AlmaLinux 8 container-selinux 2:2.189.0-1.module_el8.6.0+3336+00d107d5 ALSA-2022:7529, ALSA-2022:7469
AlmaLinux 8 containernetworking-plugins 0.9.1-1.module_el8.6.0+2876+9ed4eae2 ALSA-2022:7529, ALSA-2022:7469
AlmaLinux 8 crit +2 3.15-1.module_el8.6.0+2876+9ed4eae2 ALSA-2022:7529, ALSA-2022:7469
AlmaLinux 8 criu-libs +1 3.15-3.module_el8.6.0+2877+8e437bf5 ALSA-2022:7469
AlmaLinux 8 crun 0.18-3.module_el8.6.0+2876+9ed4eae2 ALSA-2022:7529, ALSA-2022:7469
AlmaLinux 8 fuse-overlayfs 1.4.0-2.module_el8.6.0+2876+9ed4eae2 ALSA-2022:7529, ALSA-2022:7469
AlmaLinux 8 libslirp +1 4.3.1-1.module_el8.6.0+2876+9ed4eae2 ALSA-2022:7529, ALSA-2022:7469
AlmaLinux 8 netavark +1 2:1.0.1-35.module_el8.7.0+3344+5bcd850f ALSA-2022:7469
AlmaLinux 8 oci-seccomp-bpf-hook 1.2.0-3.module_el8.6.0+2876+9ed4eae2 ALSA-2022:7529, ALSA-2022:7469
AlmaLinux 8 podman +5 3.0.1-13.module_el8.7.0+3297+1eb250cf ALSA-2022:7529, ALSA-2022:7469
AlmaLinux 8 podman-gvproxy 2:4.0.2-8.module_el8.7.0+3344+5bcd850f ALSA-2022:7469
AlmaLinux 8 python3-podman 4.0.0-1.module_el8.6.0+2877+8e437bf5 ALSA-2022:7469
AlmaLinux 8 runc 1.0.0-73.rc95.module_el8.6.0+2876+9ed4eae2 ALSA-2022:7529, ALSA-2022:7469
AlmaLinux 8 skopeo +2 1:1.2.4-2.module_el8.7.0+3297+1eb250cf ALSA-2022:7529, ALSA-2022:7469
AlmaLinux 8 slirp4netns 1.1.8-1.module_el8.6.0+2876+9ed4eae2 ALSA-2022:7529, ALSA-2022:7469
AlmaLinux 8 toolbox +1 0.0.99.3-0.5.module_el8.7.0+3344+5bcd850f ALSA-2022:7529, ALSA-2022:7469
AlmaLinux 8 udica 0.2.4-1.module_el8.6.0+2876+9ed4eae2 ALSA-2022:7529, ALSA-2022:7469

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 8 buildah 1.19.9-6.module+el8.7.0+1076+9b1c11c1 RLSA-2022:7529, RLSA-2022:7469
Rocky Linux 8 cockpit-podman 29-2.module+el8.4.0+556+40122d08 RLSA-2022:7529, RLSA-2022:7469, RLSA-2022:7457
Rocky Linux 8 conmon 2:2.0.26-3.module+el8.4.0+556+40122d08 RLSA-2022:7529, RLSA-2022:7469, RLSA-2022:7457
Rocky Linux 8 container-selinux 2:2.189.0-1.module+el8.6.0+1054+50b00ff4 RLSA-2022:7529, RLSA-2022:7469, RLSA-2022:7457
Rocky Linux 8 containernetworking-plugins 0.9.1-1.module+el8.4.0+556+40122d08 RLSA-2022:7529, RLSA-2022:7469, RLSA-2022:7457
Rocky Linux 8 containers-common 2:1-35.module+el8.6.0+997+05c9d812 RLSA-2022:7469
Rocky Linux 8 criu 3.15-1.module+el8.4.0+556+40122d08 RLSA-2022:7529, RLSA-2022:7469, RLSA-2022:7457
Rocky Linux 8 crun 0.18-3.module+el8.6.0+783+10209741 RLSA-2022:7529, RLSA-2022:7469, RLSA-2022:7457
Rocky Linux 8 fuse-overlayfs 1.4.0-2.module+el8.4.0+558+7340b765 RLSA-2022:7529, RLSA-2022:7469, RLSA-2022:7457
Rocky Linux 8 libslirp 4.3.1-1.module+el8.4.0+556+40122d08 RLSA-2022:7529, RLSA-2022:7469, RLSA-2022:7457
Rocky Linux 8 oci-seccomp-bpf-hook 1.2.0-3.module+el8.5.0+709+440d5e7e RLSA-2022:7529, RLSA-2022:7469, RLSA-2022:7457
Rocky Linux 8 podman 3.0.1-13.module+el8.7.0+1076+9b1c11c1 RLSA-2022:7529, RLSA-2022:7469
Rocky Linux 8 python-podman 4.0.0-1.module+el8.6.0+784+32aef5de RLSA-2022:7469
Rocky Linux 8 runc 1.0.0-73.rc95.module+el8.5.0+769+55ca48e8 RLSA-2022:7529, RLSA-2022:7469, RLSA-2022:7457
Rocky Linux 8 skopeo 1:1.2.4-2.module+el8.7.0+1076+9b1c11c1 RLSA-2022:7529, RLSA-2022:7469
Rocky Linux 8 slirp4netns 1.1.8-1.module+el8.4.0+537+38cf4e42 RLSA-2022:7529, RLSA-2022:7469, RLSA-2022:7457
Rocky Linux 8 toolbox 0.0.99.3-0.5.module+el8.7.0+1077+0e4f03d4 RLSA-2022:7529, RLSA-2022:7469, RLSA-2022:7457
Rocky Linux 8 udica 0.2.4-1.module+el8.4.0+556+40122d08 RLSA-2022:7529, RLSA-2022:7469, RLSA-2022:7457
ReleasePackageFixed inAdvisory
SLES 15 SP4 conmon 2.1.5-150400.3.3.1 SUSE-SU-2022:4635-1
SLES 15 SP3 conmon 2.1.5-150300.8.6.1 SUSE-SU-2022:4607-1
SLES 15 SP2 conmon 2.1.3-150100.3.9.1 SUSE-SU-2022:3896-1
SLES 15 SP1 conmon 2.1.3-150100.3.9.1 SUSE-SU-2022:3896-1
Show 13 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 15 SP2 conmon 2.1.3-150100.3.9.1 SUSE-SU-2022:3896-1
SLES for SAP 15 SP1 conmon 2.1.3-150100.3.9.1 SUSE-SU-2022:3896-1
SLE Micro 5.3 conmon 2.1.5-150400.3.3.1 SUSE-SU-2022:4635-1
SLE Micro 5.2 conmon 2.1.5-150300.8.6.1 SUSE-SU-2022:4607-1
SLE Micro 5.1 conmon 2.1.5-150300.8.6.1 SUSE-SU-2022:4607-1
SLE HPC 15 SP2 conmon 2.1.3-150100.3.9.1 SUSE-SU-2022:3896-1
SLE HPC 15 SP1 conmon 2.1.3-150100.3.9.1 SUSE-SU-2022:3896-1
SUSE Manager Server 4.1 conmon 2.1.3-150100.3.9.1 SUSE-SU-2022:3896-1
SUSE Manager Retail Branch Server 4.1 conmon 2.1.3-150100.3.9.1 SUSE-SU-2022:3896-1
SUSE Manager Proxy 4.1 conmon 2.1.3-150100.3.9.1 SUSE-SU-2022:3896-1
SUSE Enterprise Storage 7.1 conmon 2.1.5-150300.8.6.1 SUSE-SU-2022:4607-1
SUSE Enterprise Storage 7 conmon 2.1.3-150100.3.9.1 SUSE-SU-2022:3896-1
SUSE Enterprise Storage 6 conmon 2.1.3-150100.3.9.1 SUSE-SU-2022:3896-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed conmon 2.1.2-1.1 openSUSE-SU-2024:12162-1
openSUSE Tumbleweed cri-o 1.24.1-1.1 openSUSE-SU-2024:12206-1
openSUSE Leap 15.4 conmon 2.1.5-150400.3.3.1 SUSE-SU-2022:4635-1
openSUSE Leap 15.3 conmon 2.1.5-150300.8.6.1 SUSE-SU-2022:4607-1
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
openSUSE Leap Micro 5.3 conmon 2.1.5-150400.3.3.1 SUSE-SU-2022:4635-1
openSUSE Leap Micro 5.2 conmon 2.1.5-150300.8.6.1 SUSE-SU-2022:4607-1
ReleasePackageFixed inAdvisory
Alpine v3.24 cri-o 1.24.1-r0 —
Alpine v3.23 cri-o 1.24.1-r0 —
Alpine v3.22 cri-o 1.24.1-r0 —
Alpine v3.21 cri-o 1.24.1-r0 —

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 2 (CBL-Mariner) cri-o 1.21.7-1 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 8 buildah +1 1.19.9-6.module+el8.7.0+20785+0180d035 ELSA-2022-7529, ELSA-2022-7469, ELSA-2022-7457
Oracle Linux 8 cockpit-podman 29-2.module+el8.7.0+20785+0180d035 ELSA-2022-7529, ELSA-2022-7469, ELSA-2022-7457
Oracle Linux 8 conmon 2:2.0.26-3.module+el8.7.0+20785+0180d035 ELSA-2022-7529, ELSA-2022-7469, ELSA-2022-7457
Oracle Linux 8 container-selinux 2:2.189.0-1.module+el8.7.0+20785+0180d035 ELSA-2022-7529, ELSA-2022-7469, ELSA-2022-7457
Oracle Linux 8 containernetworking-plugins 0.9.1-1.module+el8.7.0+20785+0180d035 ELSA-2022-7529, ELSA-2022-7469, ELSA-2022-7457
Oracle Linux 8 cri-o 1.21.7-2.el8 ELSA-2022-9720, ELSA-2022-9718
Oracle Linux 8 crit +2 3.15-1.module+el8.7.0+20785+0180d035 ELSA-2022-7529, ELSA-2022-7469, ELSA-2022-7457
Oracle Linux 8 criu-libs +1 3.15-3.module+el8.7.0+20872+81cbf159 ELSA-2022-7469, ELSA-2022-7457
Oracle Linux 8 crun 0.18-3.module+el8.7.0+20785+0180d035 ELSA-2022-7529, ELSA-2022-7469, ELSA-2022-7457
Oracle Linux 8 fuse-overlayfs 1.4.0-2.module+el8.7.0+20785+0180d035 ELSA-2022-7529, ELSA-2022-7469, ELSA-2022-7457
Oracle Linux 8 libslirp +1 4.3.1-1.module+el8.7.0+20785+0180d035 ELSA-2022-7529, ELSA-2022-7469, ELSA-2022-7457
Oracle Linux 8 netavark +1 2:1.0.1-35.module+el8.7.0+20872+81cbf159 ELSA-2022-7469, ELSA-2022-7457
Oracle Linux 8 oci-seccomp-bpf-hook 1.2.0-3.module+el8.7.0+20785+0180d035 ELSA-2022-7529, ELSA-2022-7469, ELSA-2022-7457
Oracle Linux 8 podman +5 3.0.1-13.module+el8.7.0+20785+0180d035 ELSA-2022-7529, ELSA-2022-7469, ELSA-2022-7457
Oracle Linux 8 podman-gvproxy 2:4.0.2-8.module+el8.7.0+20872+81cbf159 ELSA-2022-7469, ELSA-2022-7457
Oracle Linux 8 python3-podman 4.0.0-1.module+el8.7.0+20872+81cbf159 ELSA-2022-7469, ELSA-2022-7457
Oracle Linux 8 runc 1.0.0-73.rc95.module+el8.7.0+20785+0180d035 ELSA-2022-7529, ELSA-2022-7469, ELSA-2022-7457
Oracle Linux 8 skopeo +2 1:1.2.4-2.0.1.module+el8.7.0+20785+0180d035 ELSA-2022-7529, ELSA-2022-7469, ELSA-2022-7457
Oracle Linux 8 slirp4netns 1.1.8-1.module+el8.7.0+20785+0180d035 ELSA-2022-7529, ELSA-2022-7469, ELSA-2022-7457
Oracle Linux 8 udica 0.2.4-1.module+el8.7.0+20785+0180d035 ELSA-2022-7529, ELSA-2022-7469, ELSA-2022-7457
Oracle Linux 7 cri-o 1.21.7-2.el7 ELSA-2022-9719, ELSA-2022-9717

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/cri-o/cri-o >= 1.24.0, < 1.24.1 1.24.1 GHSA-fcm2-6c3h-pg6j
Go github.com/cri-o/cri-o >= 1.23.0, < 1.23.3 1.23.3 GHSA-fcm2-6c3h-pg6j
Go github.com/cri-o/cri-o < 1.22.5 1.22.5 GHSA-fcm2-6c3h-pg6j
Go github.com/cri-o/cri-o < 1.22.5 · >= 1.23.0, < 1.23.3 · >= 1.24.0, < 1.24.1 1.22.5, 1.23.3, 1.24.1 GO-2022-0480

Advisories 26

References