CVE-2018-1000400

概要

参考情報

• securityfocus.com/bid/104262 · Third Party Advisory
• kubernetes-incubator/cri-o#1558 · Patch

cri-o のその他の脆弱性

• CVE-2024-5154高 8.1A flaw was found in cri-o. A malicious container can create a symbolic link to arbitrary files on the host via directory traversal (“../“). …
• CVE-2022-2995高 7.1Incorrect handling of the supplementary groups in the CRI-O container engine might lead to sensitive information disclosure or possible data…
• CVE-2022-1708高 7.5A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API. The ExecS…
• CVE-2022-0811高 8.8A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes c…
• CVE-2022-0532中 4.2An incorrect sysctls validation vulnerability was found in CRI-O 1.18 and earlier. The sysctls from the list of "safe" sysctls specified for…