vulnerability

Huawei EulerOS: CVE-2024-3154: docker-runc security update

Severity
8
CVSS
(AV:N/AC:L/Au:M/C:C/I:C/A:C)
Published
Apr 26, 2024
Added
Oct 9, 2024
Modified
Aug 13, 2025

Description

A flaw was found in cri-o, where an arbitrary systemd property can be injected via a Pod annotation. Any user who can create a pod with an arbitrary annotation may perform an arbitrary action on the host system.

Solution

huawei-euleros-2_0_sp12-upgrade-docker-runc
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.