Lucene search

K
osvGoogleOSV:CVE-2018-1000400
HistoryMay 18, 2018 - 6:29 p.m.

CVE-2018-1000400

2018-05-1818:29:00
Google
osv.dev
5

AI Score

9

Confidence

High

EPSS

0.001

Percentile

48.9%

Kubernetes CRI-O version prior to 1.9 contains a Privilege Context Switching Error (CWE-270) vulnerability in the handling of ambient capabilities that can result in containers running with elevated privileges, allowing users abilities they should not have. This attack appears to be exploitable via container execution. This vulnerability appears to have been fixed in 1.9.

AI Score

9

Confidence

High

EPSS

0.001

Percentile

48.9%