CVE-2025-0750

A vulnerability was found in CRI-O. A path traversal issue in the log management functions UnMountPodLogs and LinkContainerLogs may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system...

CVE-2025-0750

CVE-2025-0750 is a path traversal vulnerability in CRI-O’s log management (UnMountPodLogs, LinkContainerLogs) that can let a user with pod-creation/deletion permissions unmount arbitrary host paths, causing node-level denial of service. This affects Red Hat OpenShift Container Platform 4.17.16; R...

CVE-2025-0750 Cri-o: cri-o path traversal in log handling functions allows arbitrary unmounting

A vulnerability was found in CRI-O. A path traversal issue in the log management functions UnMountPodLogs and LinkContainerLogs may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system...

CVE-2025-0750 Cri-o: cri-o path traversal in log handling functions allows arbitrary unmounting

A vulnerability was found in CRI-O. A path traversal issue in the log management functions UnMountPodLogs and LinkContainerLogs may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system...

SUSE CVE-2025-0750

A vulnerability was found in CRI-O. A path traversal issue in the log management functions UnMountPodLogs and LinkContainerLogs may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system...

PT-2025-4037 · Cri-O +1 · Cri-O +1

Name of the Vulnerable Software and Affected Versions: CRI-O affected versions not specified Description: A path traversal issue in the log management functions, specifically UnMountPodLogs and LinkContainerLogs, may allow an attacker with permissions to create and delete Pods to unmount arbitrar...

CVE-2025-0750

A vulnerability was found in CRI-O. A path traversal issue in the log management functions UnMountPodLogs and LinkContainerLogs may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system...

CVE-2024-45338 affecting package cri-tools for versions less than 1.30.1-2

CVE-2024-45338 affecting package cri-tools for versions less than 1.30.1-2. A patched version of the package is available...

CVE-2024-45338 affecting package cri-tools for versions less than 1.29.0-6

CVE-2024-45338 affecting package cri-tools for versions less than 1.29.0-6. A patched version of the package is available...

CVE-2024-9341 affecting package cri-o for versions less than 1.22.3-9

CVE-2024-9341 affecting package cri-o for versions less than 1.22.3-9. A patched version of the package is available...

CVE-2024-45338 affecting package cri-o for versions less than 1.22.3-9

CVE-2024-45338 affecting package cri-o for versions less than 1.22.3-9. A patched version of the package is available...

AZL-55067 CVE-2025-21613 affecting package cri-o 1.30.1-1

go-git is a highly extensible git implementation library written in pure Go. An argument injection vulnerability was discovered in go-git versions prior to v5.13. Successful exploitation of this vulnerability could allow an attacker to set arbitrary values to git-upload-pack flags. This only...

AZL-55088 CVE-2025-21613 affecting package cri-o for versions less than 1.22.3-12

go-git is a highly extensible git implementation library written in pure Go. An argument injection vulnerability was discovered in go-git versions prior to v5.13. Successful exploitation of this vulnerability could allow an attacker to set arbitrary values to git-upload-pack flags. This only...

AZL-55106 CVE-2025-21614 affecting package cri-o for versions less than 1.22.3-14

go-git is a highly extensible git implementation library written in pure Go. A denial of service DoS vulnerability was discovered in go-git versions prior to v5.13. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git serve...

AZL-55073 CVE-2025-21614 affecting package cri-o 1.30.1-1

go-git is a highly extensible git implementation library written in pure Go. A denial of service DoS vulnerability was discovered in go-git versions prior to v5.13. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git serve...

AZL-54512 CVE-2024-45338 affecting package cri-tools for versions less than 1.29.0-6

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

AZL-54461 CVE-2024-45338 affecting package cri-tools for versions less than 1.32.0-1

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

CVE-2024-24786 affecting package cri-tools for versions less than 1.29.0-5

CVE-2024-24786 affecting package cri-tools for versions less than 1.29.0-5. A patched version of the package is available...

AZL-54353 CVE-2024-45337 affecting package cri-o 1.30.1-1

Applications and libraries which misuse connection.serverAuthenticate via callback field ServerConfig.PublicKeyCallback may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that "A call to this function does not guarantee that the key offered is...

CRI-O: Maliciously structured checkpoint file can gain arbitrary node access

Impact Patches 1.31.1, 1.30.6, 1.29.8 Workarounds set enablecriusupport = false References Are there any links users can visit to find out more?...