Description (CNA)
A flaw was found in CRI-O that involves an experimental annotation leading to a container being unconfined. This may allow a pod to specify and get any amount of memory/cpu, circumventing the kubernetes scheduler and potentially resulting in a denial of service in the node.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Red Hat / Red Hat OpenShift Container Platform 4.13 | unaffected 0:1.26.4-6.1.rhaos4.13.git9eb9cf3.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected 0:1.27.2-7.rhaos4.14.git1cc7a64.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 3.11 | unknown |
CWE
CWE-770
References
- https://access.redhat.com/errata/RHSA-2024:0195
- https://access.redhat.com/errata/RHSA-2024:0207
- https://access.redhat.com/security/cve/CVE-2023-6476
- https://bugzilla.redhat.com/show_bug.cgi?id=2253994
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.