Database/Container, Kubernetes & orchestration
CRI-O: Crafted environment variable injects arbitrary lines into /etc/passwd
CVE-2022-4318Container, Kubernetes & orchestrationcurated
Impact
Crafted environment variable injects arbitrary lines into /etc/passwd
Who can reach it
Malicious image or tenant-controlled pod env
What to do
Upgrade CRI-O; drain node
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.