~ / search / GHSA-7p9f-6x8j-gxxp

GHSA-7p9f-6x8j-gxxp

CRI-O: Maliciously structured checkpoint file can gain arbitrary node access

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-8676

Packages

EcosystemPackageAffectedFixed in
Go github.com/cri-o/cri-o < 1.29.11 1.29.11
Go github.com/cri-o/cri-o >= 1.30.0, < 1.30.8 1.30.8
Go github.com/cri-o/cri-o >= 1.31.0, < 1.31.3 1.31.3

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact ### Patches 1.31.1, 1.30.6, 1.29.8 ### Workarounds set `enable_criu_support = false` ### References _Are there any links users can visit to find out more?_

References

External links from the advisory. They lead to third-party sites.