sandbox

Jan 10, 2023 GO-2022-0426 +4 more

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Oct 21, 2022 GO-2022-0426 +4 more

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jun 6, 2022 GO-2022-0426 +4 more

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Mar 15, 2022 GO-2022-0426 +5 more

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Feb 11, 2022 GO-2022-0354 +6 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Dec 17, 2021 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jun 6, 2022 GO-2022-0426 +5 more

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

May 17, 2022 GO-2022-0426 +6 more

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Mar 15, 2022 GO-2022-0426 +6 more

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Feb 24, 2022 GO-2022-0354 +7 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Nov 8, 2021 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Aug 25, 2021 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Changes in this version

+ func ParseDNSOptions(servers, searches, options []string, path string) (retErr error)

type Sandbox

+ ResolvPath func() string

May 17, 2022 GO-2022-0426 +6 more

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Mar 15, 2022 GO-2022-0426 +6 more

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Mar 5, 2022 GO-2022-0354 +7 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Nov 9, 2021 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Sep 9, 2021 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jul 19, 2021 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jun 3, 2021 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Apr 13, 2021 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Changes in this version

+ func PauseCommand(cfg *libconfig.Config, image *v1.Image) ([]string, error)

type Sandbox

+ InitInfraContainer func(*libconfig.Config, *storage.ContainerInfo) error

+ Spec func() *generate.Generator

Jul 18, 2022 GO-2022-0426 +6 more

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Mar 15, 2022 GO-2022-0426 +6 more

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Nov 8, 2021 GO-2022-0354 +7 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Sep 9, 2021 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jul 19, 2021 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jun 2, 2021 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Mar 17, 2021 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Feb 24, 2021 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Dec 11, 2020 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Dec 9, 2020 GO-2022-0426 +6 more

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Mar 15, 2022 GO-2022-0426 +6 more

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Mar 8, 2022 GO-2022-0354 +7 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Sep 9, 2021 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jul 19, 2021 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jun 2, 2021 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Dec 24, 2020 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Sep 14, 2020 GO-2022-0354 +8 more

  GO-2022-0354: Code Injection in CRI-O in github.com/cri-o/cri-o

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Aug 21, 2020 GO-2022-0363 +7 more

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jan 11, 2022 GO-2022-0363 +7 more

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jan 6, 2022 GO-2022-0363 +7 more

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Oct 23, 2020 GO-2022-0363 +7 more

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jul 16, 2020 GO-2022-0363 +7 more

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Jun 18, 2020 GO-2022-0363 +7 more

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

May 14, 2020 GO-2022-0363 +7 more

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Apr 23, 2020 GO-2022-0363 +7 more

  GO-2022-0363: Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Changes in this version

+ type Sandbox interface

+ AddContainer func(container.Container) error

+ Config func() *pb.PodSandboxConfig

+ Create func() error

+ Delete func() error

+ ID func() string

+ Name func() string

+ RemoveContainer func(container.Container) error

+ SetConfig func(*pb.PodSandboxConfig) error

+ SetNameAndID func() error

+ Start func() error

+ Stop func() error

+ func New(ctx context.Context) Sandbox

Apr 14, 2020 GO-2022-0426 +6 more

  GO-2022-0426: Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

  GO-2022-0480: Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

  GO-2022-0608: Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

  GO-2022-1014: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

  GO-2022-1206: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

  GO-2024-2458: CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o

  GO-2024-2791: CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o