KubeArmor v1.7.5-rc2

KubeArmor is a cloud-native runtime security enforcement system that restricts the behavior such as process execution, file access, and networking operations of pods, containers, and nodes VMs at the system level. KubeArmor leverag...

PT-2022-13244 · Cri-O +1 · Cri-O +1

Name of the Vulnerable Software and Affected Versions: CRI-O versions 1.18 and earlier Description: An incorrect sysctls validation issue was found, allowing an attacker to apply sysctls from the list of "safe" sysctls specified for the cluster to the host if they can create a pod with a hostIPC...