Database/Container, Kubernetes & orchestration
CRI-O: Malicious container creates a symlink via directory traversal and gets arbitrary host read/write
CVE-2024-5154Container, Kubernetes & orchestrationcurated
Impact
Malicious container creates a symlink via directory traversal and gets arbitrary host read/write
Who can reach it
Any tenant workload / malicious image
What to do
Upgrade CRI-O on all nodes; drain and recreate pods
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.