VYPR
← All advisories
Medium severity5.0NVD Advisory· Published Nov 25, 2019· Updated Jun 17, 2026

CVE-2019-14891

CVE-2019-14891

Description

A flaw was found in cri-o, as a result of all pod-related processes being placed in the same memory cgroup. This can result in container management (conmon) processes being killed if a workload process triggers an out-of-memory (OOM) condition for the cgroup. An attacker could abuse this flaw to get host network access on an cri-o host.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Cri O/Cri O2 versions
    cpe:2.3:a:kubernetes:cri-o:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:kubernetes:cri-o:*:*:*:*:*:*:*:*range: <1.16.1
    • (no CPE)
  • Red Hat/Openshift Container Platform3 versions
    cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:openshift_container_platform:4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:openshift_container_platform:4.2:*:*:*:*:*:*:*
  • Fedoraproject/Fedora
    cpe:2.3:o:fedoraproject:fedora:-:*:*:*:*:*:*:*
  • cri-o/cri-odescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.