777 matches found
container-cve-2021-22555
Reproducer for CVE-2021-22555 as a container First, this rolls in the exploit code from here as a handy pre-built container: https://github.com/google/security-research/tree/master/pocs/linux/cve-2021-22555 Pre-built container: quay.io/cgwalters/cve-2021-22555 Mitigation: seccomp profiles A stron...
AZL-107063 CVE-2026-97032 affecting package cri-o 1.30.1-1
HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...
AZL-107075 CVE-2026-78669 affecting package cri-o 1.30.1-1
A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values...
AZL-107069 CVE-2026-78659 affecting package cri-o 1.30.1-1
When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...
AZL-107066 CVE-2026-78663 affecting package cri-o 1.30.1-1
The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...
AZL-107054 CVE-2026-78660 affecting package cri-o 1.30.1-1
Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...
AZL-107057 CVE-2026-107325 affecting package cri-o 1.30.1-1
Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index and runtime panic when an application calls bson.RawArray.Validate or bsoncore.Array.Validate on a malformed four-byte array. An unauthenticated actor who can supply raw BSON array data to an...
AZL-107072 CVE-2026-61801 affecting package cri-o 1.30.1-1
The github.com/moby/sys/user package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do not sufficiently limit entries when parsing /etc/passwd- or /etc/group-style files, allowing an attacker who can supply a specially...
AZL-106655 CVE-2026-76061 affecting package cri-o 1.30.1-1
A flaw was found in CRI-O's bindmountprefix handling. When configured with a non-empty bindmountprefix, a malicious container or local attacker could use a Container Runtime Interface CRI hostPath containing an intermediate absolute symlink. This could cause the bind mount source to resolve outsi...
CVE-2026-76061
A flaw was found in CRI-O's bindmountprefix handling. When configured with a non-empty bindmountprefix, a malicious container or local attacker could use a Container Runtime Interface CRI hostPath containing an intermediate absolute symlink. This could cause the bind mount source to resolve outsi...
CVE-2026-76061 Cri-o: cri-o: bind_mount_prefix intermediate-symlink prefix bypass
A flaw was found in CRI-O's bindmountprefix handling. When configured with a non-empty bindmountprefix, a malicious container or local attacker could use a Container Runtime Interface CRI hostPath containing an intermediate absolute symlink. This could cause the bind mount source to resolve outsi...
CVE-2026-76061 Cri-o: cri-o: bind_mount_prefix intermediate-symlink prefix bypass
A flaw was found in CRI-O's bindmountprefix handling. When configured with a non-empty bindmountprefix, a malicious container or local attacker could use a Container Runtime Interface CRI hostPath containing an intermediate absolute symlink. This could cause the bind mount source to resolve outsi...
EUVD-2026-93915
A flaw was found in CRI-O's bindmountprefix handling. When configured with a non-empty bindmountprefix, a malicious container or local attacker could use a Container Runtime Interface CRI hostPath containing an intermediate absolute symlink. This could cause the bind mount source to resolve outsi...
CVE-2026-76061
A flaw in CRI-O 's bind_mount_prefix handling allows a malicious container or local attacker to bypass prefix restrictions. By using a Container Runtime Interface (CRI) hostPath containing an intermediate absolute symlink, an attacker can cause the bind mount source to resolve outside the intende...
CVE-2026-76061
A flaw was found in CRI-O's bindmountprefix handling. When configured with a non-empty bindmountprefix, a malicious container or local attacker could use a Container Runtime Interface CRI hostPath containing an intermediate absolute symlink. This could cause the bind mount source to resolve outsi...
[SECURITY] Fedora 45 Update: cri-o1.36-1.36.6-1.fc45
Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...
PT-2026-107188
Name of the Vulnerable Software and Affected Versions CRI-O affected versions not specified Description An issue exists in the handling of the bind mount prefix configuration. When this prefix is non-empty, a local attacker or a malicious container can utilize a Container Runtime Interface CRI...
CVE-2026-76061: Improper Link Resolution Before File Access
A flaw was found in CRI-O's bindmountprefix handling. When configured with a non-empty bindmountprefix, a malicious container or local attacker could use a Container Runtime Interface CRI hostPath containing an intermediate absolute symlink. This could cause the bind mount source to resolve outsi...