CVE-2019-14891

Name of the Vulnerable Software and Affected Versions cri-o (affected versions not specified)

Description A flaw in cri-o allows all pod-related processes to be placed in the same memory cgroup. This can lead to container management (conmon) processes being killed if a workload process triggers an out-of-memory (OOM) condition for the cgroup. An attacker could exploit this flaw to gain host network access on a cri-o host.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.