| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/cri-o/cri-o | < 1.23.1 | 1.23.1 |
| cri-o | ≤ 1.18 | |
| openshift container platform | = 4.0 |
An incorrect sysctls validation vulnerability was found in CRI-O 1.18 and earlier. The sysctls from the list of "safe" sysctls specified for the cluster will be applied to the host if an attacker is able to create a pod with a hostIPC and hostNetwork kernel namespace.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free