Security Advisory

CVE-2018-1000400

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-05-18 18:00:00

Last updated 2024-08-05 12:40:47

Assigner mitre

State PUBLISHED

Description

Kubernetes CRI-O version prior to 1.9 contains a Privilege Context Switching Error (CWE-270) vulnerability in the handling of ambient capabilities that can result in containers running with elevated privileges, allowing users abilities they should not have. This attack appears to be exploitable via container execution. This vulnerability appears to have been fixed in 1.9.

← Browse all CVEs View on cve.org ↗