Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jqmc-79gx-7g8p

Опубликовано: 11 фев. 2022
Источник: github
Github: Прошло ревью
CVSS3: 4.2

Описание

Incorrect Permission Assignment for Critical Resource in CRI-O

An incorrect sysctls validation vulnerability was found in CRI-O 1.18 and earlier. The sysctls from the list of "safe" sysctls specified for the cluster will be applied to the host if an attacker is able to create a pod with a hostIPC and hostNetwork kernel namespace.

Пакеты

Наименование

github.com/cri-o/cri-o

go
Затронутые версииВерсия исправления

< 1.23.1

1.23.1

EPSS

Процентиль: 24%
0.00079
Низкий

4.2 Medium

CVSS3

Дефекты

CWE-732

Связанные уязвимости

CVSS3: 4.2
ubuntu
почти 4 года назад

An incorrect sysctls validation vulnerability was found in CRI-O 1.18 and earlier. The sysctls from the list of "safe" sysctls specified for the cluster will be applied to the host if an attacker is able to create a pod with a hostIPC and hostNetwork kernel namespace.

CVSS3: 4.2
redhat
около 4 лет назад

An incorrect sysctls validation vulnerability was found in CRI-O 1.18 and earlier. The sysctls from the list of "safe" sysctls specified for the cluster will be applied to the host if an attacker is able to create a pod with a hostIPC and hostNetwork kernel namespace.

CVSS3: 4.2
nvd
почти 4 года назад

An incorrect sysctls validation vulnerability was found in CRI-O 1.18 and earlier. The sysctls from the list of "safe" sysctls specified for the cluster will be applied to the host if an attacker is able to create a pod with a hostIPC and hostNetwork kernel namespace.

CVSS3: 4.2
debian
почти 4 года назад

An incorrect sysctls validation vulnerability was found in CRI-O 1.18 ...

EPSS

Процентиль: 24%
0.00079
Низкий

4.2 Medium

CVSS3

Дефекты

CWE-732