CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-5154

A flaw was found in cri-o. A malicious container can create a symbolic link to arbitrary files on the host via directory traversal (“../“). This flaw allows the container to read and write to arbitrary files on the host system.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 31.4%

CVSS Severity

CVSS v3 Score 8.1

References

Products affected by CVE-2024-5154

Kubernetes » Cri-O » Version: 1.28.6

cpe:2.3:a:kubernetes:cri-o:1.28.6
Kubernetes » Cri-O » Version: 1.29.4

cpe:2.3:a:kubernetes:cri-o:1.29.4
Kubernetes » Cri-O » Version: 1.30.0

cpe:2.3:a:kubernetes:cri-o:1.30.0
Redhat » Openshift Container Platform » Version: 3.11

cpe:2.3:a:redhat:openshift_container_platform:3.11
Redhat » Openshift Container Platform » Version: 4.0

cpe:2.3:a:redhat:openshift_container_platform:4.0
Redhat » Openshift Container Platform » Version: 4.12

cpe:2.3:a:redhat:openshift_container_platform:4.12
Redhat » Openshift Container Platform » Version: 4.13

cpe:2.3:a:redhat:openshift_container_platform:4.13
Redhat » Openshift Container Platform » Version: 4.14

cpe:2.3:a:redhat:openshift_container_platform:4.14
Redhat » Openshift Container Platform » Version: 4.15

cpe:2.3:a:redhat:openshift_container_platform:4.15
Redhat » Enterprise Linux » Version: 8.0

cpe:2.3:o:redhat:enterprise_linux:8.0
Redhat » Enterprise Linux » Version: 9.0

cpe:2.3:o:redhat:enterprise_linux:9.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-5154

Products

Pricing

Contact Us