CVE-2023-6476

Summary

CVE-2023-6476 is a vulnerability in CRI-O, an open-source container runtime for Kubernetes. The issue arises from an experimental annotation that allows a pod to request and obtain unrestricted memory and CPU resources. This bypasses the Kubernetes scheduler, potentially causing a denial of service on the affected node. The flaw may enable container breakout, leading to unintended container privileges and resource consumption. It is strongly recommended that users apply the available patch as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.