852 matches found
CVE-2022-27652
A flaw was found in cri-o, where containers were incorrectly started with non-empty default permissions. A vulnerability was found in Moby Docker Engine where containers started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs...
CVE-2022-27652
A flaw was found in cri-o, where containers were incorrectly started with non-empty default permissions. A vulnerability was found in Moby Docker Engine where containers started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs...
cri-o 安全漏洞
cri-o is a lightweight container runtime environment for the Kubernetes system. A security vulnerability exists in cri-o that stems from software that incorrectly starts containers using non-empty default permissions. An attacker accessing a program with inheritable file functionality exploits th...
AZL-39870 CVE-2022-27651 affecting package cri-o for versions less than 1.21.7-2
A flaw was found in buildah where containers were incorrectly started with non-empty default permissions. A bug was found in Moby Docker Engine where containers were incorrectly started with non-empty inheritable Linux process capabilities, enabling an attacker with access to programs with...
CVE-2022-27652
A flaw was found in cri-o, where containers were incorrectly started with non-empty default permissions. A vulnerability was found in Moby Docker Engine where containers started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs...
Security fix for the ALT Linux 9 package cri-o version 1.20.7-alt1
1.20.7-alt1 built March 25, 2022 Mikhail Gordeev in task 296972 March 21, 2022 Mikhail Gordeev - new version 1.20.0 - Fixes: CVE-2022-0811...
Security fix for the ALT Linux 10 package cri-o version 1.22.3-alt2
1.22.3-alt2 built March 24, 2022 Mikhail Gordeev in task 296969 March 21, 2022 Mikhail Gordeev - Add cve fix to changelog - Fixes: CVE-2022-0811...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.6.56 packages and security update
Red Hat OpenShift Container Platform release 4.6.56 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.6. Red Hat Product Security has rated this update as having a...
RHEL 7 / 8 : OpenShift Container Platform 4.8.35 (RHSA-2022:0871)
The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0871 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...
RHEL 7 / 8 : OpenShift Container Platform 4.6.56 (RHSA-2022:0866)
The remote Redhat Enterprise Linux 7 / 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:0866 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...
RHEL 7 / 8 : OpenShift Container Platform 4.7.45 (RHSA-2022:0870)
The remote Redhat Enterprise Linux 7 / 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:0870 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.8.35 security update
Red Hat OpenShift Container Platform release 4.8.35 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.8. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.7.45 packages and security update
Red Hat OpenShift Container Platform release 4.7.45. is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.7. Red Hat Product Security has rated this update as having a...
SUSE SLES12 Security Update : containerd (SUSE-SU-2022:0719-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:0719-1 advisory. - CVE-2022-23648: A specially-crafted image configuration could gain access to read-only copies of arbitrary files and directories on the ho...
SUSE SLES15 Security Update : containerd (SUSE-SU-2022:0720-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:0720-1 advisory. - containerd is a container runtime available as a daemon for Linux and Windows. A bug was found in containerd prior to versions 1.6.1,...
Privilege Escalation
github.com/cri-o/cri-o is vulnerable to Privilege Escalation. when the pod is using a host network or IPC namespace, which allows a malicious user to set sysctls on the host without having access to hostNetwork and hostIPC...
RHEL 7 / 8 : OpenShift Container Platform 4.9.25 (RHSA-2022:0860)
The remote Redhat Enterprise Linux 7 / 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2022:0860 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private clo...
CRI-O package 1.19.x < 1.19.6 / 1.20.x < 1.20.7 / 1.21.x < 1.21.6 / 1.22.x < 1.22.3 / 1.23.x < 1.23.2 Arbitrary Code Execution (CVE-2022-0811)
The version of the CRI-O package installed on the remote host is 1.19.x prior to 1.19.6, 1.20.x prior to 1.20.7, 1.21.x prior to 1.21.6, 1.22.x prior to 1.22.3, or 1.23.x prior to 1.23.2. It is, therefore, affected by an arbitrary code execution vulnerability via abusing the 'kernel.corepattern'...
CRI-O Security Update for Kubernetes
CRI-O has released a security update addressing a critical vulnerability—CVE-2022-0811—in CRI-O 1.19. A local attacker could exploit this vulnerability to take control of an affected Kubernetes environment as well as other software or platforms that use CRI-O runtime containers. CISA encourages...
