852 matches found
GHSA-HP5J-2585-QX6G CRI-O Path Traversal vulnerability
A vulnerability was found in CRI-O. A path traversal issue in the log management functions UnMountPodLogs and LinkContainerLogs may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system...
CRI-O Path Traversal vulnerability
A vulnerability was found in CRI-O. A path traversal issue in the log management functions UnMountPodLogs and LinkContainerLogs may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system...
CVE-2025-0750
A vulnerability was found in CRI-O. A path traversal issue in the log management functions UnMountPodLogs and LinkContainerLogs may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system...
CVE-2025-0750 Cri-o: cri-o path traversal in log handling functions allows arbitrary unmounting
A vulnerability was found in CRI-O. A path traversal issue in the log management functions UnMountPodLogs and LinkContainerLogs may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system...
CVE-2025-0750
CVE-2025-0750 is a path traversal vulnerability in CRI-O’s log management (UnMountPodLogs, LinkContainerLogs) that can let a user with pod-creation/deletion permissions unmount arbitrary host paths, causing node-level denial of service. This affects Red Hat OpenShift Container Platform 4.17.16; R...
CVE-2025-0750 Cri-o: cri-o path traversal in log handling functions allows arbitrary unmounting
A vulnerability was found in CRI-O. A path traversal issue in the log management functions UnMountPodLogs and LinkContainerLogs may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system...
SUSE CVE-2025-0750
A vulnerability was found in CRI-O. A path traversal issue in the log management functions UnMountPodLogs and LinkContainerLogs may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system...
PT-2025-4037 · Cri-O +1 · Cri-O +1
Name of the Vulnerable Software and Affected Versions: CRI-O affected versions not specified Description: A path traversal issue in the log management functions, specifically UnMountPodLogs and LinkContainerLogs, may allow an attacker with permissions to create and delete Pods to unmount arbitrar...
CVE-2025-0750
A vulnerability was found in CRI-O. A path traversal issue in the log management functions UnMountPodLogs and LinkContainerLogs may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system...
CVE-2024-45338 affecting package cri-tools for versions less than 1.30.1-2
CVE-2024-45338 affecting package cri-tools for versions less than 1.30.1-2. A patched version of the package is available...
CVE-2024-9341 affecting package cri-o for versions less than 1.22.3-9
CVE-2024-9341 affecting package cri-o for versions less than 1.22.3-9. A patched version of the package is available...
CVE-2024-45338 affecting package cri-tools for versions less than 1.29.0-6
CVE-2024-45338 affecting package cri-tools for versions less than 1.29.0-6. A patched version of the package is available...
CVE-2024-45338 affecting package cri-o for versions less than 1.22.3-9
CVE-2024-45338 affecting package cri-o for versions less than 1.22.3-9. A patched version of the package is available...
AZL-55073 CVE-2025-21614 affecting package cri-o 1.30.1-1
go-git is a highly extensible git implementation library written in pure Go. A denial of service DoS vulnerability was discovered in go-git versions prior to v5.13. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git serve...
AZL-55067 CVE-2025-21613 affecting package cri-o 1.30.1-1
go-git is a highly extensible git implementation library written in pure Go. An argument injection vulnerability was discovered in go-git versions prior to v5.13. Successful exploitation of this vulnerability could allow an attacker to set arbitrary values to git-upload-pack flags. This only...
AZL-55088 CVE-2025-21613 affecting package cri-o for versions less than 1.22.3-12
go-git is a highly extensible git implementation library written in pure Go. An argument injection vulnerability was discovered in go-git versions prior to v5.13. Successful exploitation of this vulnerability could allow an attacker to set arbitrary values to git-upload-pack flags. This only...
AZL-55106 CVE-2025-21614 affecting package cri-o for versions less than 1.22.3-14
go-git is a highly extensible git implementation library written in pure Go. A denial of service DoS vulnerability was discovered in go-git versions prior to v5.13. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git serve...
AZL-54461 CVE-2024-45338 affecting package cri-tools for versions less than 1.32.0-1
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...
AZL-54512 CVE-2024-45338 affecting package cri-tools for versions less than 1.29.0-6
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...