CRI-O Path Traversal vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2025-0750 · ADVISORY
• access.redhat.com/errata/RHSA-2025:1122 · WEB
• access.redhat.com/security/cve/CVE-2025-0750 · WEB
• bugzilla.redhat.com/show_bug.cgi · WEB
• cri-o/cri-o · PACKAGE
• access.redhat.com/errata/RHEA-2024:6126
• GitHub Advisory GHSA-hp5j-2585-qx6g · ADVISORY

github.com/cri-o/cri-o のその他の脆弱性

• CVE-2025-4437中 5.7There's a vulnerability in the CRI-O application where when container is launched with securityContext.runAsUser specifying a non-existent u…
• CVE-2024-8676高 7.4A vulnerability was found in CRI-O, where it can be requested to take a checkpoint archive of a container and later be asked to restore it. …
• GO-2022-0363Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o
• CVE-2024-5154高 8.1A flaw was found in cri-o. A malicious container can create a symbolic link to arbitrary files on the host via directory traversal (“../“). …
• CVE-2024-3154高 7.2A flaw was found in cri-o, where an arbitrary systemd property can be injected via a Pod annotation. Any user who can create a pod with an a…