Executive brief
CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o
Affected products
- Go github.com/cri-o/cri-o
Junglewise Threat Intelligence
CVE-2022-2995: GO-2022-1014 - CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o
CVE-2022-2995 · Severity: low · CVSS 3.1 · Published 2024-08-21
Technologies: github.com/cri-o/cri-o (Go). Vendors: Go.
Related threats
- GO-2025-3897 - CRI-O has Potential High Memory Consumption from File Read in github.com/cri-o/cri-o
- GO-2025-3426 - CRI-O Path Traversal vulnerability in github.com/cri-o/cri-o
- GO-2024-3292 - CRI-O: Maliciously structured checkpoint file can gain arbitrary node access in github.com/cri-o/cri-o
- GO-2022-1206 - CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o
- GO-2022-0608 - Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o