{"id":"EUVD-2025-28020","enisaUuid":"03ff7138-6e1c-38d1-8209-6cc39c542f91","description":"There\u0027s a vulnerability in the CRI-O application where when container is launched with securityContext.runAsUser specifying a non-existent user, CRI-O attempts to create the user, reading the container\u0027s entire /etc/passwd file into memory. If this file is excessively large, it can cause the a high memory consumption leading applications to be killed due to out-of-memory. As a result a denial-of-service can be achieved, possibly disrupting other pods and services running in the same host.","datePublished":"Aug 20, 2025, 12:19:18 PM","dateUpdated":"Sep 1, 2026, 11:51:10 AM","baseScore":5.7,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","references":"https://access.redhat.com/security/cve/CVE-2025-4437\nhttps://bugzilla.redhat.com/show_bug.cgi?id\u003d2375084\n","aliases":"CVE-2025-4437\nGHSA-8f93-j3fx-72f3\n","assigner":"redhat","epss":0.25,"enisaIdProduct":[],"enisaIdVendor":[],"enisaIdVulnerability":[{"id":"915ec413-7226-3e61-a02f-e9e4bb7c2609","vulnerability":{"id":"CVE-2025-4437","description":"There\u0027s a vulnerability in the CRI-O application where when container is launched with securityContext.runAsUser specifying a non-existent user, CRI-O attempts to create the user, reading the container\u0027s entire /etc/passwd file into memory. If this file is excessively large, it can cause the a high memory consumption leading applications to be killed due to out-of-memory. As a result a denial-of-service can be achieved, possibly disrupting other pods and services running in the same host.","datePublished":"Aug 20, 2025, 12:19:18 PM","dateUpdated":"Sep 1, 2026, 11:51:10 AM","status":"PUBLISHED","baseScore":5.7,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","references":"https://access.redhat.com/security/cve/CVE-2025-4437\nhttps://bugzilla.redhat.com/show_bug.cgi?id\u003d2375084\n","enisa_id":"EUVD-2025-28020\n","assigner":"redhat","epss":0.25,"dataProcessed":"Nov 4, 2026, 7:13:44 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"96ad486a-3289-3b82-83c8-30143ddc62f0","vulnerability":{"id":"GHSA-8f93-j3fx-72f3","description":"CRI-O has Potential High Memory Consumption from File Read","datePublished":"Aug 20, 2025, 3:31:41 PM","dateUpdated":"Aug 29, 2025, 8:38:22 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2025-4437\nhttps://access.redhat.com/security/cve/CVE-2025-4437\nhttps://bugzilla.redhat.com/show_bug.cgi?id\u003d2375084\nhttps://github.com/cri-o/cri-o\nhttps://pkg.go.dev/vuln/GO-2025-3897\n","enisa_id":"EUVD-2025-28020\n","aliases":"CVE-2025-4437\nGHSA-8f93-j3fx-72f3\n","epss":0.0,"dataProcessed":"May 3, 2026, 2:12:39 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}