CVE:CVE-2022-27652
CNNVD:CNNVD-202204-3652
cri-o是一款用于Kubernetes系统的轻量级容器运行时环境。
cri-o 存在安全漏洞，该漏洞源于软件使用非空默认权限错误地启动了容器。访问具有可继承文件功能的程序的攻击者利用该漏洞进行权限提升。
solution:Upgrade kubernetes cri-o to a higher version than -; Upgrade fedoraproject fedora to a higher version than 35,and avoid the version 35; Upgrade mobyproject moby to a higher version than 20.10.14,and avoid the version (,20.10.14); Upgrade redhat openshift_container_platform to a higher version than 3.11,4.0,and avoid the version 3.11,4.0