Incorrect Permission Assignment for Critical Resource in CRI-O

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-0532 · ADVISORY
• cri-o/cri-o#5610 · WEB
• bugzilla.redhat.com/show_bug.cgi · WEB
• cri-o/cri-o · PACKAGE
• cri-o/cri-o release v1.23.1 · WEB
• kubernetes.io/docs/tasks/administer-cluster/sysctl-cluster · WEB
• GitHub Advisory GHSA-jqmc-79gx-7g8p · ADVISORY

Lỗ hổng khác của github.com/cri-o/cri-o

• CVE-2025-4437TRUNG BÌNH 5.7There's a vulnerability in the CRI-O application where when container is launched with securityContext.runAsUser specifying a non-existent u…
• CVE-2025-0750TRUNG BÌNH 6.6A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow …
• CVE-2024-8676CAO 7.4A vulnerability was found in CRI-O, where it can be requested to take a checkpoint archive of a container and later be asked to restore it. …
• GO-2022-0363Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o
• CVE-2024-5154CAO 8.1A flaw was found in cri-o. A malicious container can create a symbolic link to arbitrary files on the host via directory traversal (“../“). …