← Database

CVE-2022-4318

HIGH CVSS: 7.8 Published: 2023-09-25 Modified: 2026-06-17

Description

A vulnerability was found in cri-o. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable.

Affected Platforms

Redhat Enterprise LinuxFedoraproject Extra Packages For Enterprise LinuxRedhat Openshift Container Platform For Arm64Redhat Openshift Container Platform For PowerFedoraproject FedoraRedhat Openshift Container Platform For LinuxoneKubernetes Cri-ORedhat Openshift Container Platform Ibm Z Systems

Weakness Type

CWE-538, CWE-913

References