{"id":"EUVD-2025-28020","revision":"8c0f4e4a84d74c19b5dd6ef59179a5f4","records":[{"revision":"8c0f4e4a84d74c19b5dd6ef59179a5f4","observedAt":"2026-11-05T01:10:29.713+00:00","statement":{"source":"euvd","id":"EUVD-2025-28020","aliases":["CVE-2025-4437","GHSA-8f93-j3fx-72f3"],"title":"There's a vulnerability in the CRI-O application where when container is launched with securityContext.runAsUser specifying a non-existent user, CRI-O attempts to create the user, reading the container's entire /etc/passwd file into memory.…","description":"There's a vulnerability in the CRI-O application where when container is launched with securityContext.runAsUser specifying a non-existent user, CRI-O attempts to create the user, reading the container's entire /etc/passwd file into memory. If this file is excessively large, it can cause the a high memory consumption leading applications to be killed due to out-of-memory. As a result a denial-of-service can be achieved, possibly disrupting other pods and services running in the same host.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","score":5.7,"severity":null}],"references":["https://access.redhat.com/security/cve/CVE-2025-4437","https://bugzilla.redhat.com/show_bug.cgi?id=2375084"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-28020","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Aug 20, 2025, 12:19:18 PM","dateUpdated":"Sep 1, 2026, 11:51:10 AM"},"relatedAdvisories":[],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2025-28020","identifiers":["EUVD-2025-28020","CVE-2025-4437","GHSA-8f93-j3fx-72f3"]},"retained":false,"historicalAffected":[]}],"coverage":[]}