Lucene search

K
osvGoogleOSV:CVE-2018-1000400
HistoryMay 18, 2018 - 6:29 p.m.

CVE-2018-1000400

2018-05-1818:29:00
Google
osv.dev
2

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.9%

Kubernetes CRI-O version prior to 1.9 contains a Privilege Context Switching Error (CWE-270) vulnerability in the handling of ambient capabilities that can result in containers running with elevated privileges, allowing users abilities they should not have. This attack appears to be exploitable via container execution. This vulnerability appears to have been fixed in 1.9.

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.9%