CVE:CVE-2022-1708
CNNVD:CNNVD-202206-654
CRI-O是一款用于Kubernetes系统的轻量级容器运行时环境。
CRI-O存在资源管理错误漏洞，该漏洞源于CRI-O读取输出缺少大小限制。攻击者可以制造较大的输出来利用该漏洞影响系统的可用性。
solution:Upgrade kubernetes cri-o to a higher version than 1.19.7,1.20.8,1.21.8,1.22.5,1.23.3,1.24.0,and avoid the version (,1.19.7),[1.20.0,1.20.8),[1.21.0,1.21.8),[1.22.0,1.22.5),[1.23.0,1.23.3),1.24.0; Upgrade fedoraproject fedora to a higher version than 36,and avoid the version 36; Upgrade redhat openshift_container_platform to a higher version than 3.11,4.0,4.9,4.10,and avoid the version 3.11,4.0,4.9,4.10; Upgrade redhat enterprise_linux to a higher version than 7.0,8.0,9.0,and avoid the version 7.0,8.0,9.0