Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library

...

GO-2025-3897 CRI-O has Potential High Memory Consumption from File Read in github.com/cri-o/cri-o

CRI-O has Potential High Memory Consumption from File Read in github.com/cri-o/cri-o...

AZL-66728 CVE-2025-58058 affecting package cri-o 1.30.1-1

xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current...

CVE-2025-4437

There's a vulnerability in the CRI-O application where when container is launched with securityContext.runAsUser specifying a non-existent user, CRI-O attempts to create the user, reading the container's entire /etc/passwd file into memory. If this file is excessively large, it can cause the a hi...

Allocation of Resources Without Limits or Throttling

Overview github.com/cri-o/cri-o/server is an OCI-based implementation of Kubernetes Container Runtime Interface Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the handling of the /etc/passwd file. An attacker with minimal privileges to...

TencentOS Server 4: cri-o (TSSA-2025:0033)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0033 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CVE-2024-9676 affecting package cri-o for versions less than 1.22.3-14

CVE-2024-9676 affecting package cri-o for versions less than 1.22.3-14. A patched version of the package is available...

Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a cri-o security vulnerability (CVE-2024-9676)

Summary Red Hat OpenShift on IBM Cloud is affected by a security vulnerability found in the cri-o component which a remote authenticated attacker could exploit to cause a denial of service condition. CVE-2024-9676 Vulnerability Details CVEID: CVE-2024-9676 Description: Podman, Buildah and CRI-O a...

Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a cri-o security vulnerability (CVE-2024-5154)

Summary Red Hat OpenShift on IBM Cloud is affected by a security vulnerability found in the cri-o component which could allow an attacker to send a specially crafted URL request containing "dot dot" sequences /../ to read and write arbitrary files on the system. Vulnerability Details CVEID:...

CVE-2025-21613 affecting package cri-o for versions less than 1.22.3-12

CVE-2025-21613 affecting package cri-o for versions less than 1.22.3-12. A patched version of the package is available...

CVE-2023-49568 affecting package cri-o for versions less than 1.22.3-12

CVE-2023-49568 affecting package cri-o for versions less than 1.22.3-12. A patched version of the package is available...

CVE-2023-49569 affecting package cri-o for versions less than 1.22.3-12

CVE-2023-49569 affecting package cri-o for versions less than 1.22.3-12. A patched version of the package is available...

AZL-61812 CVE-2025-22872 affecting package cri-o 1.30.1-1

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...

CVE-2025-21614 affecting package cri-o for versions less than 1.22.3-13

CVE-2025-21614 affecting package cri-o for versions less than 1.22.3-13. A patched version of the package is available...

CVE-2025-27144 affecting package cri-o for versions less than 1.22.3-12

CVE-2025-27144 affecting package cri-o for versions less than 1.22.3-12. A patched version of the package is available...

CRI-O Installed (Linux)

Binary data cri-odetect.nbin...

CVE-2024-44337 affecting package cri-o for versions less than 1.22.3-11

CVE-2024-44337 affecting package cri-o for versions less than 1.22.3-11. A patched version of the package is available...

Linux Distros Unpatched Vulnerability : CVE-2024-9676

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-...

Linux Distros Unpatched Vulnerability : CVE-2024-8676

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in CRI-O, where it can be requested to take a checkpoint archive of a container and later be asked to restore it. When it does that...

Linux Distros Unpatched Vulnerability : CVE-2022-1708

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API. The ExecSync request runs...