« Volver al listado

CVE-2024-3154

Estado: AplazadaAlta (7.2)—

A flaw was found in cri-o, where an arbitrary systemd property can be injected via a Pod annotation. Any user who can create a pod with an arbitrary annotation may perform an arbitrary action on the host system.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Kubernetes — Cri-oAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-3154",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-3154",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-08-24T14:00:23.252609Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "secalert@redhat.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.2,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.2
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "versions": [
            {
              "status": "affected",
              "version": "1.27.5",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "1.27.6",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "1.28.5",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "1.28.6",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "1.29.3",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "1.29.4",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "1.30.0",
              "versionType": "semver"
            }
          ],
          "packageName": "cri-o",
          "collectionURL": "https://github.com/cri-o/cri-o",
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.12::el8",
            "cpe:/a:redhat:openshift:4.12::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.12",
          "versions": [
            {
              "status": "unaffected",
              "version": "0:1.25.5-16.2.rhaos4.12.gitcb09013.el8",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "cri-o",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.13::el9",
            "cpe:/a:redhat:openshift:4.13::el8"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.13",
          "versions": [
            {
              "status": "unaffected",
              "version": "0:1.26.5-16.2.rhaos4.13.git67e2a9d.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "cri-o",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.14::el8",
            "cpe:/a:redhat:openshift:4.14::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.14",
          "versions": [
            {
              "status": "unaffected",
              "version": "0:1.27.6-2.rhaos4.14.gitb3bd0bf.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "cri-o",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el9",
            "cpe:/a:redhat:openshift:4.15::el8"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "versions": [
            {
              "status": "unaffected",
              "version": "0:1.28.6-2.rhaos4.15.git77bbb1c.el8",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "cri-o",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:3.11"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 3.11",
          "packageName": "cri-o",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-04-26T04:15:09.217",
  "references": [
    {
      "url": "https://access.redhat.com/errata/RHSA-2024:2669",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2024:2672",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2024:2784",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2024:3496",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/security/cve/CVE-2024-3154",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2272532",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://github.com/cri-o/cri-o/security/advisories/GHSA-2cgq-h8xw-2v5j",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://github.com/opencontainers/runc/pull/4217",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://github.com/opencontainers/runtime-spec/blob/main/features.md#unsafe-annotations-in-configjson",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2024:2669",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2024:2672",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2024:2784",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2024:3496",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://access.redhat.com/security/cve/CVE-2024-3154",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2272532",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://github.com/cri-o/cri-o/security/advisories/GHSA-2cgq-h8xw-2v5j",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://github.com/opencontainers/runc/pull/4217",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://github.com/opencontainers/runtime-spec/blob/main/features.md#unsafe-annotations-in-configjson",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "secalert@redhat.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-77"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A flaw was found in cri-o, where an arbitrary systemd property can be injected via a Pod annotation. Any user who can create a pod with an arbitrary annotation may perform an arbitrary action on the host system."
    },
    {
      "lang": "es",
      "value": "Se encontró una falla en cri-o, donde se puede inyectar una propiedad systemd arbitraria mediante una anotación Pod. Cualquier usuario que pueda crear un pod con una anotación arbitraria puede realizar una acción arbitraria en el sistema host."
    }
  ],
  "lastModified": "2026-08-24T15:16:37.210",
  "sourceIdentifier": "secalert@redhat.com"
}