6.6Orta
CVE-2025-0750Cri-o: cri-o path traversal in log handling functions allows arbitrary unmounting
Açıklama
A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system directories.
Zayıflık türü (CWE):
CWE-22
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| openshift | 4.17 | — | |
| openshift | 4.18 | — | |
| openshift ironic | 4.18 | — | |
| Red Hat | Red Hat OpenShift Container Platform 4.17 | all versions | |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | all versions | |
| — | cri-o | < 1.33.1 |
Kaynaklar ve yamalar
- RHEA-2024:6126 vendor-advisory
- RHSA-2025:1122 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2025-0750 vdb-entry
- RHBZ#2339405 issue-tracking