1180 matches found
CVE-2025-47291 containerd CRI plugin: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods.
containerd is an open-source container runtime. A bug was found in the containerd's CRI implementation where containerd, starting in version 2.0.1 and prior to version 2.0.5, doesn't put usernamespaced containers under the Kubernetes' cgroup hierarchy, therefore some Kubernetes limits are not...
CVE-2025-47291
containerd is an open-source container runtime. A bug was found in the containerd's CRI implementation where containerd, starting in version 2.0.1 and prior to version 2.0.5, doesn't put usernamespaced containers under the Kubernetes' cgroup hierarchy, therefore some Kubernetes limits are not...
CVE-2025-47291: Incorrect Privilege Assignment
containerd is an open-source container runtime. A bug was found in the containerd's CRI implementation where containerd, starting in version 2.0.1 and prior to version 2.0.5, doesn't put usernamespaced containers under the Kubernetes' cgroup hierarchy, therefore some Kubernetes limits are not...
CVE-2024-9676 affecting package cri-o for versions less than 1.22.3-14
CVE-2024-9676 affecting package cri-o for versions less than 1.22.3-14. A patched version of the package is available...
Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a cri-o security vulnerability (CVE-2024-9676)
Summary Red Hat OpenShift on IBM Cloud is affected by a security vulnerability found in the cri-o component which a remote authenticated attacker could exploit to cause a denial of service condition. CVE-2024-9676 Vulnerability Details CVEID: CVE-2024-9676 Description: Podman, Buildah and CRI-O a...
Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a cri-o security vulnerability (CVE-2024-5154)
Summary Red Hat OpenShift on IBM Cloud is affected by a security vulnerability found in the cri-o component which could allow an attacker to send a specially crafted URL request containing "dot dot" sequences /../ to read and write arbitrary files on the system. Vulnerability Details CVEID:...
CVE-2025-21613 affecting package cri-o for versions less than 1.22.3-12
CVE-2025-21613 affecting package cri-o for versions less than 1.22.3-12. A patched version of the package is available...
CVE-2023-49569 affecting package cri-o for versions less than 1.22.3-12
CVE-2023-49569 affecting package cri-o for versions less than 1.22.3-12. A patched version of the package is available...
CVE-2023-49568 affecting package cri-o for versions less than 1.22.3-12
CVE-2023-49568 affecting package cri-o for versions less than 1.22.3-12. A patched version of the package is available...
AZL-60586 CVE-2025-22872 affecting package cri-tools for versions less than 1.29.0-8
The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...
AZL-61812 CVE-2025-22872 affecting package cri-o 1.30.1-1
The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...
AZL-60459 CVE-2025-22872 affecting package cri-tools for versions less than 1.32.0-2
The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...
[SECURITY] Fedora 42 Update: cri-tools1.29-1.29.0-11.fc42
CLI and validation tools for Kubelet Container Runtime Interface CRI...
CVE-2025-21614 affecting package cri-o for versions less than 1.22.3-13
CVE-2025-21614 affecting package cri-o for versions less than 1.22.3-13. A patched version of the package is available...
CVE-2025-27144 affecting package cri-o for versions less than 1.22.3-12
CVE-2025-27144 affecting package cri-o for versions less than 1.22.3-12. A patched version of the package is available...
[SECURITY] Fedora 41 Update: cri-tools1.29-1.29.0-11.fc41
CLI and validation tools for Kubelet Container Runtime Interface CRI...
CRI-O Installed (Linux)
Binary data cri-odetect.nbin...
Fedora 41 : cri-tools1.29 (2025-37c6639afe)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-37c6639afe advisory. - Resolve FTBFS - Resolves: rhbz2352149 - Adopt trivy for license detection to be consistent with cri- tools1.29..1.32 Tenable has extracted the preceding...
Azure Linux 3.0 Security Update: cri-tools / moby-runc / runc (CVE-2024-45310)
The version of cri-tools / moby-runc / runc installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45310 advisory. - runc is a CLI tool for spawning and running containers according to the OCI...