opencontainers/runtime-spec

opencontainers/runtime-spec

GitHubGitHub
GitHubgithub.com
www.opencontainers.orgwww.opencontainers.org
Releases21
Frequency6 months 2 days
Last Release
Stars3.65K
OCI Runtime Specification
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2024-3154NVD↗
—7.2 HIGH—

A flaw was found in cri-o, where an arbitrary systemd property can be injected via a Pod annotation. Any user who can create a pod with an arbitrary annotation may perform an arbitrary action on the host system.