Not rated
CVE-2022-0532 An incorrect sysctls validation vulnerability was found in CRI-O 1.18 and earlier
Description
An incorrect sysctls validation vulnerability was found in CRI-O 1.18 and earlier. The sysctls from the list of "safe" sysctls specified for the cluster will be applied to the host if an attacker is able to create a pod with a hostIPC and hostNetwork kernel namespace.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| cri-o | 1.18 | No fix stated |
Other CVEs of cri-o
The 6 CVEs of cri-o →
CVE-2022-2995
Incorrect handling of the supplementary groups in the CRI-O container engine might lead to sensitive information…
7.1
High
CVE-2022-1708
A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the…
Not rated
CVE-2022-27652
A flaw was found in cri-o, where containers were incorrectly started with non-empty default permissions
Not rated
CVE-2022-0811
A flaw was found in CRI-O in the way it set kernel options for a pod
Not rated