Multiple vulnerabilities in CRI-O



Risk Low
Patch available YES
Number of vulnerabilities 2
CVE-ID CVE-2022-4318
CVE-2022-2995
CWE-ID CWE-20
CWE-284
Exploitation vector Local
Public exploit N/A
Vulnerable software
 CRI-O
Web applications / Modules and components for CMS

Vendor CRI-O

Security Bulletin

This security bulletin contains information about 2 vulnerabilities.

1) Input validation error

EUVDB-ID: #VU70478

Risk: Low

CVSSv4.0: 1.7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-4318

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a local user to bypass certain security restrictions.

The vulnerability exists due to improper input validation when handling newline characters in environment variables. A local user can create a specially crafted environment variable and add entries to a container's /etc/passwd. It is also possible to circumvent admission validation of username/UID by adding such an entry.

Mitigation

Install update from vendor's website.

Vulnerable software versions

CRI-O: 1.24.0 - 1.25.2

CPE2.3 External links

https://github.com/cri-o/cri-o/releases/tag/v1.24.5
https://github.com/cri-o/cri-o/releases/tag/v1.25.3


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Improper access control

EUVDB-ID: #VU66817

Risk: Low

CVSSv4.0: 0.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-2995

CWE-ID: CWE-284 - Improper Access Control

Exploit availability: No

Description

The vulnerability allows a local user to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to incorrect handling of the supplementary groups. A local user can bypass implemented security restrictions, leading to sensitive information disclosure or possible data modification.

Mitigation

Install update from vendor's website.

Vulnerable software versions

CRI-O: 1.24.0 - 1.24.4

CPE2.3 External links

https://github.com/cri-o/cri-o/releases/tag/v1.24.5


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###