A flaw was found in CRI-O that involves an experimental annotation leading to a container being unconfined. This may allow a pod to specify and get any amount of memory/cpu, circumventing the kubernetes scheduler and potentially resulting in a denial of service in the node.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2024-01-09T21:32:03.407Z

Updated: 2024-11-24T11:54:48.596Z

Reserved: 2023-12-04T06:23:22.231Z

Link: CVE-2023-6476

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2024-01-09T22:15:43.610

Modified: 2024-11-21T08:43:55.687

Link: CVE-2023-6476

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-01-09T21:00:00Z

Links: CVE-2023-6476 - Bugzilla