Поиск уязвимостей
Количество 34
Количество 34
ALT-PU-2026-15235
ALT-PU-2026-15235: package `cri-o1.36` update to version 1.36.5-alt1
ALT-PU-2026-15237
ALT-PU-2026-15237: package `cri-o1.33` update to version 1.33.13-alt1
ALT-PU-2026-15239
ALT-PU-2026-15239: package `cri-o1.35` update to version 1.35.8-alt1
ALT-PU-2026-15238
ALT-PU-2026-15238: package `cri-o1.34` update to version 1.34.13-alt1
CVE-2022-4318
A vulnerability was found in cri-o. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable.
CVE-2022-4318
A vulnerability was found in cri-o. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable.
CVE-2022-4318
A vulnerability was found in cri-o. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable.
CVE-2022-4318
Cri-o: /etc/passwd tampering privesc
CVE-2022-4318
A vulnerability was found in cri-o. This issue allows the addition of ...
GHSA-cm9x-c3rh-7rc4
CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation
BDU:2024-02430
Уязвимость прикладного программного интерфейса CRI-O Container Engine программного средства управления кластерами виртуальных машин Kubernetes, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
ROS-20240401-03
Уязвимость cri-o
CVE-2026-15809
A flaw was found in CRI-O. The fix for a previous vulnerability (CVE-2022-4318) was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable.
CVE-2026-15809
A flaw was found in CRI-O. The fix for a previous vulnerability (CVE-2022-4318) was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable.
CVE-2026-15809
A flaw was found in CRI-O. The fix for a previous vulnerability (CVE-2 ...
ALT-PU-2023-1519
ALT-PU-2023-1519: package `cri-o` update to version 1.26.2-alt1
ROS-20261001-80-0036
Уязвимость cri-o1.36
ROS-20261001-80-0035
Уязвимость cri-o1.35
ROS-20261001-80-0034
Уязвимость cri-o1.34
GHSA-9gq4-2485-q63q
A flaw was found in CRI-O. The fix for a previous vulnerability (CVE-2022-4318) was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2026-15235 ALT-PU-2026-15235: package `cri-o1.36` update to version 1.36.5-alt1 | CVSS3: 7.8 | около 2 месяцев назад | |
| ALT-PU-2026-15237 ALT-PU-2026-15237: package `cri-o1.33` update to version 1.33.13-alt1 | CVSS3: 7.8 | около 2 месяцев назад | |
| ALT-PU-2026-15239 ALT-PU-2026-15239: package `cri-o1.35` update to version 1.35.8-alt1 | CVSS3: 7.8 | около 2 месяцев назад | |
| ALT-PU-2026-15238 ALT-PU-2026-15238: package `cri-o1.34` update to version 1.34.13-alt1 | CVSS3: 7.8 | около 2 месяцев назад | |
 | CVE-2022-4318 A vulnerability was found in cri-o. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable. | CVSS3: 7.8 | 0% Низкий | около 3 лет назад |
 | CVE-2022-4318 A vulnerability was found in cri-o. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable. | CVSS3: 7.8 | 0% Низкий | почти 4 года назад |
 | CVE-2022-4318 A vulnerability was found in cri-o. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable. | CVSS3: 7.8 | 0% Низкий | около 3 лет назад |
 | CVE-2022-4318 Cri-o: /etc/passwd tampering privesc | CVSS3: 7.8 | 0% Низкий | 3 месяца назад |
| CVE-2022-4318 A vulnerability was found in cri-o. This issue allows the addition of ... | CVSS3: 7.8 | 0% Низкий | около 3 лет назад |
| GHSA-cm9x-c3rh-7rc4 CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation | CVSS3: 6.1 | 0% Низкий | почти 4 года назад |
 | BDU:2024-02430 Уязвимость прикладного программного интерфейса CRI-O Container Engine программного средства управления кластерами виртуальных машин Kubernetes, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации | CVSS3: 7.8 | 0% Низкий | около 3 лет назад |
 | ROS-20240401-03 Уязвимость cri-o | CVSS3: 7.8 | 0% Низкий | больше 2 лет назад |
| CVE-2026-15809 A flaw was found in CRI-O. The fix for a previous vulnerability (CVE-2022-4318) was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable. | CVSS3: 7.8 | 0% Низкий | 4 месяца назад |
| CVE-2026-15809 A flaw was found in CRI-O. The fix for a previous vulnerability (CVE-2022-4318) was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable. | CVSS3: 7.8 | 0% Низкий | 4 месяца назад |
| CVE-2026-15809 A flaw was found in CRI-O. The fix for a previous vulnerability (CVE-2 ... | CVSS3: 7.8 | 0% Низкий | 4 месяца назад |
| ALT-PU-2023-1519 ALT-PU-2023-1519: package `cri-o` update to version 1.26.2-alt1 | CVSS3: 7.8 | больше 3 лет назад | |
| ROS-20261001-80-0036 Уязвимость cri-o1.36 | CVSS3: 7.8 | 0% Низкий | около 1 месяца назад |
| ROS-20261001-80-0035 Уязвимость cri-o1.35 | CVSS3: 7.8 | 0% Низкий | около 1 месяца назад |
| ROS-20261001-80-0034 Уязвимость cri-o1.34 | CVSS3: 7.8 | 0% Низкий | около 1 месяца назад |
| GHSA-9gq4-2485-q63q A flaw was found in CRI-O. The fix for a previous vulnerability (CVE-2022-4318) was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable. | CVSS3: 7.8 | 0% Низкий | 4 месяца назад |
Уязвимостей на страницу