CVE-2022-0532

2022-02-0922:05:13

CWE-732

redhat

www.cve.org

sysctls

validation

vulnerability

cri-o

pod-based

attack

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

31.4%

JSON

An incorrect sysctls validation vulnerability was found in CRI-O 1.18 and earlier. The sysctls from the list of “safe” sysctls specified for the cluster will be applied to the host if an attacker is able to create a pod with a hostIPC and hostNetwork kernel namespace.

CNA Affected

[
  {
    "product": "cri-o",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "1.18"
      }
    ]
  }
]