[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_iHblFzS_H_q0B3rHUbTcGqShMoSUi4gLoeOyTePzZI":3,"g5a-risk:CVE-2019-14891":153},{"success":4,"data":5,"meta":151},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":27,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":12,"references":72,"referencesCount":79,"weaknesses":80,"weaknessesCount":96,"isActivelyExploited":97,"cisaInfo":27,"otxData":27,"relatedBlogPosts":98,"seoMetadata":99,"configurations":124,"relatedVendorCves":149,"notableEvents":150},"CVE-2019-14891","What is CVE-2019-14891?","A flaw was found in cri-o, as a result of all pod-related processes being placed in the same memory cgroup. This can result in container management (conmon) processes being killed if a workload process triggers an out-of-memory (OOM) condition for the cgroup. An attacker could abuse this flaw to get host network access on an cri-o host.","A flaw was found in cri-o, as a result of all pod-related processes being placed in the same memory cgroup. This can result in container management (conmon) ...","2019-11-25T11:15:11.43","2020-02-28T18:10:54.5",5,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":37,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","HIGH","LOW","NONE","UNCHANGED","MEDIUM",null,1.6,3.4,[31],{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":28,"ImpactScore":29},"secalert@redhat.com","Secondary",{"Version":35,"VectorString":36,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.0","CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[38],{"Source":17,"Type":18,"CVSSData":39,"BaseSeverity":26,"ExploitabilityScore":45,"ImpactScore":46,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":40,"VectorString":41,"AccessVector":21,"AccessComplexity":26,"Authentication":42,"ConfidentialityImpact":43,"IntegrityImpact":43,"AvailabilityImpact":43,"BaseScore":44,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:M\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL",6,6.8,6.4,0.00796,[47,47,47,47,47,47,47],"Medium",[51,56,61,66,69],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"kubernetes","cri-o","*","cpe:2.3:a:kubernetes:cri-o:*:*:*:*:*:*:*:*",{"vendor":57,"product":58,"version":59,"criteria":60,"vulnerable":4},"fedoraproject","fedora","-","cpe:2.3:o:fedoraproject:fedora:-:*:*:*:*:*:*:*",{"vendor":62,"product":63,"version":64,"criteria":65,"vulnerable":4},"redhat","openshift_container_platform","3.11","cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*",{"vendor":62,"product":63,"version":67,"criteria":68,"vulnerable":4},"4.1","cpe:2.3:a:redhat:openshift_container_platform:4.1:*:*:*:*:*:*:*",{"vendor":62,"product":63,"version":70,"criteria":71,"vulnerable":4},"4.2","cpe:2.3:a:redhat:openshift_container_platform:4.2:*:*:*:*:*:*:*",[73],{"url":74,"source":75,"tags":76},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=CVE-2019-14891","Red Hat",[77,78],"Issue Tracking","Third Party Advisory",1,[81,89],{"id":82,"name":83,"description":84,"extendedDescription":85,"status":86,"abstraction":87,"structure":88},"CWE-460","Improper Cleanup on Thrown Exception","The product does not clean up its state or incorrectly cleans up its state when an exception is thrown, leading to unexpected state or control flow.","Often, when functions or loops become complicated, some level of resource cleanup is needed throughout execution. Exceptions can disturb the flow of the code and prevent the necessary cleanup from happening.","Draft","Base","Simple",{"id":90,"name":91,"description":92,"extendedDescription":93,"status":94,"abstraction":95,"structure":88},"CWE-754","Improper Check for Unusual or Exceptional Conditions","The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.","The programmer may assume that certain events or conditions will never occur or do not need to be worried about, such as low memory conditions, lack of access to resources due to restrictive permissions, or misbehaving clients or components. However, attackers may intentionally trigger these unusual conditions, thus violating the programmer's assumptions, possibly introducing instability, incorrect behavior, or a vulnerability.\nNote that this entry is not exclusively about the use of exceptions and exception handling, which are mechanisms for both checking and handling unusual or unexpected conditions.","Incomplete","Class",2,false,[],{"title":100,"metaDescription":101,"keywords":102,"canonicalUrl":103,"structuredData":104},"What is CVE-2019-14891? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-14891, a medium severity cyber security vulnerability from 2019. A flaw was found in cri-o, as a result of all pod-related...","CVE-2019-14891, CVE-2019-14891 vulnerability, CVE-2019-14891 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, kubernetes security, fedoraproject security, redhat security, cri-o vulnerability, fedora vulnerability, openshift_container_platform vulnerability","\u002Fwhat-is\u002Fcve-2019-14891",{"@context":105,"@type":106,"headline":100,"description":101,"datePublished":10,"dateModified":11,"author":107,"publisher":111,"about":115,"mainEntityOfPage":119,"articleSection":122,"keywords":123},"https:\u002F\u002Fschema.org","TechArticle",{"@type":108,"name":109,"url":110},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":108,"name":109,"url":110,"logo":112},{"@type":113,"url":114},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":116,"name":6,"description":117,"additionalType":118},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":120,"@id":121},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-14891","Cybersecurity","CVE-2019-14891, CVE-2019-14891 vulnerability, CVE-2019-14891 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[125,133,139],{"Operator":27,"Negate":27,"Nodes":126},[127],{"Operator":128,"Negate":27,"CPEMatch":129},"OR",[130],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":131,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":132,"VersionEndIncluding":27},"FCFB0237-0650-4471-BAB1-4DF834BCD269","1.16.1",{"Operator":27,"Negate":27,"Nodes":134},[135],{"Operator":128,"Negate":27,"CPEMatch":136},[137],{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":138,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"D3FEADDA-2AEE-4F65-9401-971B585664A8",{"Operator":27,"Negate":27,"Nodes":140},[141],{"Operator":128,"Negate":27,"CPEMatch":142},[143,145,147],{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":144,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"2F87326E-0B56-4356-A889-73D026DB1D4B",{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":146,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"064E7BDD-4EF0-4A0D-A38D-8C75BAFEDCEF",{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":148,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"4C85A84D-A70F-4B02-9E5D-CD9660ABF048",[],[],{"lastModified":11,"cacheTime":152,"version":40},1792248926210,{"score":154,"band":155,"action":156,"scoredAt":157},17,"Info","Track","2026-10-16T06:47:19.952724+00:00"]