Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-3154
7.2
HIGHCVSS v3
Published
April 26, 2024
Affected
3 projects
Assigned by
Red Hat
Severity scale
010
Description
A flaw was found in cri-o, where an arbitrary systemd property can be injected via a Pod annotation. Any user who can create a pod with an arbitrary annotation may perform an arbitrary action on the host system.
opencontainers/runc
GitHubCLI tool for spawning and running containers according to the OCI specification
GitHubCLI tool for spawning and running containers according to the OCI specificationNVD
cri-o/cri-oGitHubOpen Container Initiative-based implementation of Kubernetes Container Runtime Interface
GitHubOpen Container Initiative-based implementation of Kubernetes Container Runtime InterfaceNVD