Criu Checkpoint/restore In Userspace — known CVE vulnerabilities

Every CVE whose affected-product data names Criu Checkpoint/restore In Userspace, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2015-5228 — CVSS 7.8 (high): The service daemon in CRIU creates log and dump files insecurely, which allows local users to create arbitrary files and take ownership of…
• CVE-2015-5231 — CVSS 5.5 (medium): The service daemon in CRIU does not properly restrict access to non-dumpable processes, which allows local users to obtain sensitive…