Description

A flaw was found in guest-components. This vulnerability allows an attacker to achieve container escape and gain unauthorized access to the underlying pod virtual machine. When unpacking a crafted Open Container Initiative (OCI) image layer, the archive extraction routine fails to restrict hard links to the target destination directory. By supplying an image containing an absolute file path, an attacker can create hard links at arbitrary locations outside the extraction directory and compromise virtual machine capabilities.

Mitigation

Aliases