{"id":"CVE-2024-5154","state":"PUBLISHED","title":"Cri-o: malicious container can create symlink on host","description":"A flaw was found in cri-o. A malicious container can create a symbolic link to arbitrary files on the host via directory traversal (“../“). This flaw allows the container to read and write to arbitrary files on the host system.","publishedAt":"2024-06-12T08:51:43.565Z","updatedAt":"2026-08-21T12:08:03.465Z","severity":{"score":8.1,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N","source":"redhat"},"assigner":"redhat","products":["cri-o","Red Hat Red Hat OpenShift Container Platform 4.12","Red Hat Red Hat OpenShift Container Platform 4.13","Red Hat Red Hat OpenShift Container Platform 4.14","Red Hat Red Hat OpenShift Container Platform 4.15","Red Hat Red Hat OpenShift Container Platform 4.16","Red Hat Red Hat OpenShift Container Platform 4.17","Red Hat Red Hat Enterprise Linux 8","Red Hat Red Hat Enterprise Linux 9","Red Hat Red Hat OpenShift Container Platform 3.11"],"affected":[{"packageName":"cri-o","defaultStatus":"unaffected","versions":[{"version":"1.30.0","status":"affected","lessThan":"1.30.1","versionType":"semver"},{"version":"1.29.4","status":"affected","lessThan":"1.29.5","versionType":"semver"},{"version":"1.28.6","status":"affected","lessThan":"1.28.7","versionType":"semver"}],"collectionURL":"https://github.com/cri-o/cri-o"},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.12","packageName":"cri-o","defaultStatus":"affected","versions":[{"version":"0:1.25.5-21.2.rhaos4.12.gita3eb75f.el8","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4.12::el8"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.13","packageName":"cri-o","defaultStatus":"affected","versions":[{"version":"0:1.26.5-18.2.rhaos4.13.git2e90133.el8","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4.13::el8","cpe:/a:redhat:openshift:4.13::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.14","packageName":"cri-o","defaultStatus":"affected","versions":[{"version":"0:1.27.7-3.rhaos4.14.git674563e.el8","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4.14::el8","cpe:/a:redhat:openshift:4.14::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.15","packageName":"cri-o","defaultStatus":"affected","versions":[{"version":"0:1.28.7-2.rhaos4.15.git111aec5.el8","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4.15::el8","cpe:/a:redhat:openshift:4.15::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.16","packageName":"cri-o","defaultStatus":"affected","versions":[{"version":"0:1.29.5-7.rhaos4.16.git7db4ada.el8","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4.16::el8","cpe:/a:redhat:openshift:4.16::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.16","packageName":"kernel","defaultStatus":"affected","versions":[{"version":"0:5.14.0-427.24.1.el9_4","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4.16::el8","cpe:/a:redhat:openshift:4.16::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.16","packageName":"openshift","defaultStatus":"affected","versions":[{"version":"0:4.16.0-202406191607.p0.g58452d8.assembly.stream.el8","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4.16::el8","cpe:/a:redhat:openshift:4.16::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.17","packageName":"rhcos","defaultStatus":"affected","versions":[{"version":"417.94.202412040832-0","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"container-tools:rhel8/podman","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"conmon","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 3.11","packageName":"cri-o","defaultStatus":"unknown","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:3.11"]}],"references":["https://access.redhat.com/errata/RHSA-2024:10818","https://access.redhat.com/errata/RHSA-2024:3676","https://access.redhat.com/errata/RHSA-2024:3700","https://access.redhat.com/errata/RHSA-2024:4008","https://access.redhat.com/errata/RHSA-2024:4159","https://access.redhat.com/errata/RHSA-2024:4486","https://access.redhat.com/security/cve/CVE-2024-5154","https://bugzilla.redhat.com/show_bug.cgi?id=2280190","https://github.com/cri-o/cri-o/security/advisories/GHSA-j9hf-98c3-wrm8"],"weaknesses":["CWE-22"],"ingestedAt":"2026-10-29T20:08:12.933Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/5xxx/CVE-2024-5154.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2024-5154","state":"PUBLISHED","datePublished":"2024-06-12T08:51:43.565Z","dateUpdated":"2026-08-21T12:08:03.465Z","assignerShortName":"redhat","assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateReserved":"2024-05-20T20:46:53.974Z"},"containers":{"cna":{"title":"Cri-o: malicious container can create symlink on host","descriptions":[{"lang":"en","value":"A flaw was found in cri-o. A malicious container can create a symbolic link to arbitrary files on the host via directory traversal (“../“). This flaw allows the container to read and write to arbitrary files on the host system."}],"affected":[{"packageName":"cri-o","defaultStatus":"unaffected","versions":[{"version":"1.30.0","status":"affected","lessThan":"1.30.1","versionType":"semver"},{"version":"1.29.4","status":"affected","lessThan":"1.29.5","versionType":"semver"},{"version":"1.28.6","status":"affected","lessThan":"1.28.7","versionType":"semver"}],"collectionURL":"https://github.com/cri-o/cri-o"},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.12","packageName":"cri-o","defaultStatus":"affected","versions":[{"version":"0:1.25.5-21.2.rhaos4.12.gita3eb75f.el8","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4.12::el8"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.13","packageName":"cri-o","defaultStatus":"affected","versions":[{"version":"0:1.26.5-18.2.rhaos4.13.git2e90133.el8","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4.13::el8","cpe:/a:redhat:openshift:4.13::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.14","packageName":"cri-o","defaultStatus":"affected","versions":[{"version":"0:1.27.7-3.rhaos4.14.git674563e.el8","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4.14::el8","cpe:/a:redhat:openshift:4.14::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.15","packageName":"cri-o","defaultStatus":"affected","versions":[{"version":"0:1.28.7-2.rhaos4.15.git111aec5.el8","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4.15::el8","cpe:/a:redhat:openshift:4.15::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.16","packageName":"cri-o","defaultStatus":"affected","versions":[{"version":"0:1.29.5-7.rhaos4.16.git7db4ada.el8","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4.16::el8","cpe:/a:redhat:openshift:4.16::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.16","packageName":"kernel","defaultStatus":"affected","versions":[{"version":"0:5.14.0-427.24.1.el9_4","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4.16::el8","cpe:/a:redhat:openshift:4.16::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.16","packageName":"openshift","defaultStatus":"affected","versions":[{"version":"0:4.16.0-202406191607.p0.g58452d8.assembly.stream.el8","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4.16::el8","cpe:/a:redhat:openshift:4.16::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.17","packageName":"rhcos","defaultStatus":"affected","versions":[{"version":"417.94.202412040832-0","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift:4.17::el9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"container-tools:rhel8/podman","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"conmon","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 3.11","packageName":"cri-o","defaultStatus":"unknown","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:3.11"]}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:10818","name":"RHSA-2024:10818","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3676","name":"RHSA-2024:3676","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3700","name":"RHSA-2024:3700","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4008","name":"RHSA-2024:4008","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4159","name":"RHSA-2024:4159","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4486","name":"RHSA-2024:4486","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-5154","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2280190","name":"RHBZ#2280190","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://github.com/cri-o/cri-o/security/advisories/GHSA-j9hf-98c3-wrm8"}],"metrics":[{"other":{"content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"},"type":"Red Hat severity rating"}},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-22","description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"redhat","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateUpdated":"2026-08-21T12:08:03.465Z"},"datePublic":"2024-05-27T18:00:00.000Z","x_redhatCweChain":"CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","workarounds":[{"lang":"en","value":"There is no mitigation available for this vulnerability, a package update is required."}],"timeline":[{"lang":"en","time":"2024-05-10T00:00:00.000Z","value":"Reported to Red Hat."},{"lang":"en","time":"2024-05-27T18:00:00.000Z","value":"Made public."}],"credits":[{"lang":"en","value":"Red Hat would like to thank Erik Sjölund (erik.sjolund@gmail.com) for reporting this issue."}],"x_generator":{"engine":"cvelib 1.8.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-07-13T20:15:38.501353Z","id":"CVE-2024-5154","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-07-13T20:15:45.221Z"}},{"title":"CVE Program Container","references":[{"url":"https://access.redhat.com/errata/RHSA-2024:3676","name":"RHSA-2024:3676","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3700","name":"RHSA-2024:3700","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4008","name":"RHSA-2024:4008","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4486","name":"RHSA-2024:4486","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-5154","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2280190","name":"RHBZ#2280190","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]},{"url":"https://github.com/cri-o/cri-o/security/advisories/GHSA-j9hf-98c3-wrm8","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-01T21:03:11.031Z"}}]}}}