QwikSec

Security Database

CVE

CWE

Training

CVE-2022-0532

Published: Feb 9, 2022

Modified: Aug 2, 2024

PUBLISHED

Description

An incorrect sysctls validation vulnerability was found in CRI-O 1.18 and earlier. The sysctls from the list of "safe" sysctls specified for the cluster will be applied to the host if an attacker is able to create a pod with a hostIPC and hostNetwork kernel namespace.

Vendor	Product	Versions
n/a	cri-o	affected `1.18`

Weaknesses (CWE)

References

https://bugzilla.redhat.com/show_bug.cgi?id=2051730

x_refsource_MISC

https://kubernetes.io/docs/tasks/administer-cluster/sysctl-cluster/#enabling-unsafe-sysctls

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.