GHSA-hp5j-2585-qx6g
CRI-O Path Traversal vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/cri-o/cri-o | <= 1.33.0 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system directories.
References
External links from the advisory. They lead to third-party sites.