CVE-2024-5154

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2024-5154
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-5154.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-5154
Aliases
Downstream
Related
Published
2024-06-12T09:15:19.973Z
Modified
2025-12-07T04:08:52.744817Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N CVSS Calculator
Summary
[none]
Details

A flaw was found in cri-o. A malicious container can create a symbolic link to arbitrary files on the host via directory traversal (“../“). This flaw allows the container to read and write to arbitrary files on the host system.

References

Affected packages

Git

github.com/kubernetes-incubator/cri-o

Affected ranges

Type
GIT
Repo
https://github.com/kubernetes-incubator/cri-o
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
51ea93e0b9af5ad2cfa7f8071ec48d99bf39a3ec
Last affected
77bbb1c279801c7d5c88b39281e22c033ccde362
Last affected
d519447937c4711db9ad3e783ab2b8121b39b996

Affected versions

v0.*

v0.0.0
v0.1
v0.2
v0.3

v1.*

v1.0.0
v1.0.0-alpha.0
v1.0.0-beta.0
v1.0.0-rc1
v1.0.0-rc2
v1.0.0-rc3
v1.18.0-rc1
v1.21.0
v1.22.0
v1.23.0
v1.24.0
v1.25.0
v1.26.0
v1.27.0
v1.28.0
v1.28.1
v1.28.2
v1.28.3
v1.28.4
v1.28.5
v1.28.6
v1.29.0
v1.29.1
v1.29.2
v1.29.3
v1.29.4
v1.30.0
v1.8.0
v1.9.0-beta.1
v1.9.0-beta.2

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-5154.json"

github.com/kubernetes/kubernetes

Affected ranges

Type
GIT
Repo
https://github.com/kubernetes/kubernetes
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
55019c83b0fd51ef4ced8c29eec2c4847f896e74
Last affected
7c48c2bd72b9bf5c44d21d7338cc7bea77d0ad2a
Last affected
be3af46a4654bdf05b4838fe94e95ec8c165660c

Affected versions

v0.*

v0.10.0
v0.11.0
v0.12.0
v0.13.0
v0.13.1-dev
v0.14.0
v0.14.1
v0.15.0
v0.16.0
v0.16.1
v0.16.2
v0.17.0
v0.17.1
v0.18.0
v0.18.1
v0.18.2
v0.19.0
v0.19.1
v0.19.2
v0.19.3
v0.2
v0.20.0
v0.20.1
v0.20.2
v0.21.0
v0.21.1
v0.21.2
v0.3
v0.4
v0.5
v0.6.0
v0.7.0
v0.8.0
v0.9.0

v1.*

v1.0.0
v1.1.0-alpha.0
v1.1.0-alpha.1
v1.10.0-alpha.0
v1.10.0-alpha.1
v1.10.0-alpha.2
v1.10.0-alpha.3
v1.11.0-alpha.0
v1.11.0-alpha.1
v1.11.0-alpha.2
v1.12.0-alpha.0
v1.12.0-alpha.1
v1.13.0-alpha.0
v1.13.0-alpha.1
v1.13.0-alpha.2
v1.13.0-alpha.3
v1.14.0-alpha.0
v1.14.0-alpha.1
v1.14.0-alpha.2
v1.14.0-alpha.3
v1.15.0-alpha.0
v1.15.0-alpha.1
v1.15.0-alpha.2
v1.15.0-alpha.3
v1.16.0-alpha.0
v1.16.0-alpha.1
v1.16.0-alpha.2
v1.16.0-alpha.3
v1.17.0-alpha.0
v1.17.0-alpha.1
v1.17.0-alpha.2
v1.17.0-alpha.3
v1.18.0-alpha.0
v1.18.0-alpha.1
v1.18.0-alpha.2
v1.18.0-alpha.4
v1.18.0-alpha.5
v1.19.0-alpha.0
v1.19.0-alpha.1
v1.19.0-alpha.2
v1.19.0-alpha.3
v1.19.0-beta.0
v1.19.0-beta.1
v1.19.0-beta.2
v1.2.0-alpha.1
v1.2.0-alpha.2
v1.2.0-alpha.3
v1.2.0-alpha.4
v1.2.0-alpha.5
v1.2.0-alpha.6
v1.2.0-alpha.7
v1.2.0-alpha.8
v1.20.0-alpha.0
v1.20.0-alpha.1
v1.20.0-alpha.2
v1.20.0-alpha.3
v1.20.0-beta.0
v1.20.0-beta.1
v1.20.0-beta.2
v1.21.0-alpha.0
v1.21.0-alpha.1
v1.21.0-alpha.2
v1.21.0-alpha.3
v1.21.0-beta.0
v1.21.0-beta.1
v1.22.0-alpha.0
v1.22.0-alpha.1
v1.22.0-alpha.2
v1.22.0-alpha.3
v1.22.0-beta.0
v1.22.0-beta.1
v1.22.0-beta.2
v1.23.0-alpha.0
v1.23.0-alpha.1
v1.23.0-alpha.2
v1.23.0-alpha.3
v1.23.0-alpha.4
v1.23.0-beta.0
v1.24.0-alpha.0
v1.24.0-alpha.1
v1.24.0-alpha.2
v1.24.0-alpha.3
v1.24.0-alpha.4
v1.24.0-beta.0
v1.25.0-alpha.0
v1.25.0-alpha.1
v1.25.0-alpha.2
v1.25.0-alpha.3
v1.25.0-beta.0
v1.26.0-alpha.0
v1.26.0-alpha.1
v1.26.0-alpha.2
v1.26.0-alpha.3
v1.26.0-beta.0
v1.27.0-alpha.0
v1.27.0-alpha.1
v1.27.0-alpha.2
v1.27.0-alpha.3
v1.27.0-beta.0
v1.28.0
v1.28.0-alpha.0
v1.28.0-alpha.1
v1.28.0-alpha.2
v1.28.0-alpha.3
v1.28.0-alpha.4
v1.28.0-beta.0
v1.28.0-rc.0
v1.28.0-rc.1
v1.28.1
v1.28.2
v1.28.3
v1.28.4
v1.28.5
v1.28.6
v1.29.0
v1.29.0-alpha.0
v1.29.0-alpha.1
v1.29.0-alpha.2
v1.29.0-alpha.3
v1.29.0-rc.0
v1.29.0-rc.1
v1.29.0-rc.2
v1.29.1
v1.29.2
v1.29.3
v1.29.4
v1.3.0-alpha.0
v1.3.0-alpha.1
v1.3.0-alpha.2
v1.3.0-alpha.3
v1.3.0-alpha.4
v1.3.0-alpha.5
v1.30.0
v1.30.0-alpha.0
v1.30.0-alpha.1
v1.30.0-alpha.2
v1.30.0-alpha.3
v1.30.0-beta.0
v1.30.0-rc.0
v1.30.0-rc.1
v1.30.0-rc.2
v1.31.0-alpha.0
v1.4.0-alpha.0
v1.4.0-alpha.1
v1.4.0-alpha.2
v1.4.0-alpha.3
v1.5.0-alpha.0
v1.5.0-alpha.1
v1.5.0-alpha.2
v1.6.0-alpha.0
v1.6.0-alpha.1
v1.6.0-alpha.2
v1.6.0-alpha.3
v1.7.0-alpha.0
v1.7.0-alpha.1
v1.7.0-alpha.2
v1.7.0-alpha.3
v1.7.0-alpha.4
v1.8.0-alpha.0
v1.8.0-alpha.1
v1.8.0-alpha.2
v1.8.0-alpha.3
v1.9.0-alpha.0
v1.9.0-alpha.1
v1.9.0-alpha.2
v1.9.0-alpha.3

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-5154.json"

github.com/openshift/telemeter

Affected ranges

Type
GIT
Repo
https://github.com/openshift/telemeter
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
465bdd9c8b8e4449a63b20dea82cbd4728b2fb2c

Affected versions

v3.*

v3.11.0

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-5154.json"