Total vulnerabilities in the database
A flaw was found in cri-o, as a result of all pod-related processes being placed in the same memory cgroup. This can result in container management (conmon) processes being killed if a workload process triggers an out-of-memory (OOM) condition for the cgroup. An attacker could abuse this flaw to get host network access on an cri-o host.
| Software | From | Fixed in |
|---|---|---|
| kubernetes / cri-o | - | 1.16.1 |
| redhat / openshift_container_platform | 3.11 | 3.11.x |
| redhat / openshift_container_platform | 4.1 | 4.1.x |
| redhat / openshift_container_platform | 4.2 | 4.2.x |