CVE-2024-5154 — Vulnerability intelligence

kubernetes — cri-o

Published: 2024-06-12T08:51:43.565Z

CVSS

8.1

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

A flaw was found in cri-o. A malicious container can create a symbolic link to arbitrary files on the host via directory traversal (“../“). This flaw allows the container to read and write to arbitrary files on the host system.

Sources

• CVE-2024-5154
• Original advisory
• Vendor Advisory
• Vendor Advisory
• Vendor Advisory
• Original advisory
• Vendor Advisory
• Vendor Advisory
• Issue Tracking
• Vendor Advisory
• CVE-2024-5154