There's a vulnerability in the CRI-O application where when container is launched with securityContext.runAsUser specifying a non-existent user, CRI-O attempts to create the user, reading the container's entire /etc/passwd file into memory. If this file is excessively large, it can cause the a high memory consumption leading applications to be killed due to out-of-memory. As a result a denial-of-service can be achieved, possibly disrupting other pods and services running in the same host.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-5237b2ff57 advisory.

    Update to release v1.33.5

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-3976569481 advisory.

    - Update to release v1.33.5
    - Resolves: rhbz#2333357, rhbz#2375096, rhbz#2398408, rhbz#2398663,       rhbz#2399065, rhbz#2399339
    - Upstream fixes

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-172ba9078e advisory.

    - Update to release v1.33.5
    - Resolves: rhbz#2333357, rhbz#2375096, rhbz#2398408, rhbz#2398663,       rhbz#2399065, rhbz#2399339
    - Upstream fixes

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-7bc36fec81 advisory.

    Automatic update for cri-o1.33-1.33.5-1.fc44.

    ##### **Changelog**

    ```
    * Thu Oct  2 2025 Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.5-1
    - Update to release v1.33.5
    - Resolves: rhbz#2333357, rhbz#2375096, rhbz#2398408, rhbz#2398663,       rhbz#2399065, rhbz#2399339
    - Upstream fixes

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
271461	Fedora 43 : cri-o1.33 (2025-5237b2ff57)	Nessus	Fedora Local Security Checks	medium
270075	Fedora 41 : cri-o1.33 (2025-3976569481)	Nessus	Fedora Local Security Checks	medium
270072	Fedora 42 : cri-o1.33 (2025-172ba9078e)	Nessus	Fedora Local Security Checks	medium
266415	Fedora 44 : cri-o1.33 (2025-7bc36fec81)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2025-4437

medium

Tenable Plugins

medium

medium

medium

medium