Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2022-9228

Опубликовано: 18 мар. 2022
Источник: oracle-oval
Платформа: Oracle Linux 7
Платформа: Oracle Linux 8

Описание

ELSA-2022-9228: cri-o security update (IMPORTANT)

[1.20.7-1]

  • Added Oracle Specifile Files for cri-o

Обновленные пакеты

Oracle Linux 7

Oracle Linux aarch64

cri-o

1.20.7-1.el7

Oracle Linux x86_64

cri-o

1.20.7-1.el7

Oracle Linux 8

Oracle Linux aarch64

cri-o

1.20.7-1.el8

Oracle Linux x86_64

cri-o

1.20.7-1.el8

Связанные CVE

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 3 лет назад

A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime to achieve a container escape and arbitrary code execution as root on the cluster node, where the malicious pod was deployed.

CVSS3: 8.8
redhat
больше 3 лет назад

A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime to achieve a container escape and arbitrary code execution as root on the cluster node, where the malicious pod was deployed.

CVSS3: 8.8
nvd
больше 3 лет назад

A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime to achieve a container escape and arbitrary code execution as root on the cluster node, where the malicious pod was deployed.

CVSS3: 8.8
debian
больше 3 лет назад

A flaw was found in CRI-O in the way it set kernel options for a pod. ...

CVSS3: 8.8
github
больше 3 лет назад

Code Injection in CRI-O