Link following in CRI-O - CVE-2024-5154

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU90964

Link following in CRI-O - CVE-2024-5154

Published: June 4, 2024


Vulnerability identifier: #VU90964
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-5154
CWE-ID: CWE-59
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to escalate privileges on the system.

The vulnerability exists due to the malicious container creates symlink "mtab" on the host External. A remote attacker can gain elevated privileges on the system.


Affected software

CRI-O
conmon-rs (Red Hat package)
cri-o (Red Hat package)
kata-containers (Red Hat package)
kernel (Red Hat package)
kernel-rt (Red Hat package)
Red Hat OpenShift Container Platform

How to mitigate CVE-2024-5154

Install updates from vendor's website.

CRI-O - addressed in versions 1.28.7, 1.29.5, 1.30.1
conmon-rs (Red Hat package) - addressed in versions 0.6.3-1.rhaos4.14.el8, 0.6.3-1.rhaos4.14.el9
cri-o (Red Hat package) - addressed in versions 1.25.5-21.2.rhaos4.12.gita3eb75f.el8, 1.26.5-18.2.rhaos4.13.git2e90133.el8, 1.26.5-18.2.rhaos4.13.git2e90133.el9, 1.27.7-3.rhaos4.14.git674563e.el8, 1.27.7-3.rhaos4.14.git674563e.el9
kata-containers (Red Hat package) - addressed in versions 3.0.2-15.rhaos4.12.el8, 3.2.0-7.rhaos4.13.el9
Red Hat OpenShift Container Platform - addressed in versions 4.12.60, 4.13.45, 4.15.17, 4.15.18, 4.17.8
kernel (Red Hat package) - addressed in versions 4.18.0-372.109.1.el8_6, 5.14.0-284.69.1.el9_2
kernel-rt (Red Hat package) - addressed in versions 4.18.0-372.109.1.rt7.269.el8_6, 5.14.0-284.69.1.rt14.354.el9_2

External References

Related Security Bulletins