Approved changes feed: RSS · Atom

cpe:2.3:a:kubernetes:cri-o:1.25.0:*:*:*:*:*:*:*

part: a version: 1.25.0 update: *

VendorKubernetes (3ee05930-9e42-51b2-ad52-30832f573b15)
ProductCri O (82cd6a0b-11f3-5c33-b509-4fb83357c63a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/cri-o/cri-o purl2cpe 2026-06-01 10:13:27.433746
pkg:rpm/opensuse/cri-o purl2cpe 2026-06-01 10:13:27.433748

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-2995 vulnerable 2026-06-03 14:47:07.708453 Details available
Incorrect handling of the supplementary groups in the CRI-O container engine might lead to sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.
Published: 2022-09-19T19:53:23.000Z
Updated: 2025-05-29T15:57:51.706Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.