7.8
High
CVE-2022-4318 A vulnerability was found in cri-o
Description
A vulnerability was found in cri-o. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat OpenShift Container Platform 4.11 | Versions not published | |
| Red Hat OpenShift Container Platform 4.12 | Versions not published | |
| Red Hat Enterprise Linux 9 | Versions not published |
References
- RHSA-2023:1033 access.redhat.com
- RHSA-2023:1503 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2152703 bugzilla.redhat.com
Timeline
- Published
- Last modified
Other CVEs of Red Hat OpenShift Container Platform 4.11
The 5 CVEs of Red Hat OpenShift Container Platform 4.11 →
CVE-2023-6596
An incomplete fix was shipped for the Rapid Reset (CVE-2023-44487/CVE-2023-39325) vulnerability for an OpenShift…
7.5
High
CVE-2024-21626
runc is a CLI tool for spawning and running containers on Linux according to the OCI specification
8.6
High
CVE-2023-5408
A privilege escalation flaw was found in the node restriction admission plugin of the kubernetes api server of OpenShift
7.2
High
CVE-2023-1260
An authentication bypass vulnerability was discovered in kube-apiserver
8.0
High