Vulnerability · Published Mar 16, 2022 · Assigned by redhat
CVE-2022-0811
High 8.8
In plain English
A high-severity code injection in CRI-O. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 19.0% (higher than 97% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)8.8High
Exploit odds (30 days)19.0%top 2.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling1Public PoC
Official description
A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime to achieve a container escape and arbitrary code execution as root on the cluster node, where the malicious pod was deployed.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine:v3.21 | cri-o | 1.23.2-r0 | ALPINE-CVE-2022-0811 |
| Alpine:v3.22 | cri-o | 1.23.2-r0 | ALPINE-CVE-2022-0811 |
| Alpine:v3.23 | cri-o | 1.23.2-r0 | ALPINE-CVE-2022-0811 |
| Alpine:v3.24 | cri-o | 1.23.2-r0 | ALPINE-CVE-2022-0811 |
| Go | github.com/cri-o/cri-o | 1.19.6 | GHSA-6x2m-w449-qwx7 |
| Go | github.com/cri-o/cri-o | 1.20.7 | GHSA-6x2m-w449-qwx7 |
| Go | github.com/cri-o/cri-o | 1.21.6 | GHSA-6x2m-w449-qwx7 |
| Go | github.com/cri-o/cri-o | 1.22.3 | GHSA-6x2m-w449-qwx7 |
| Go | github.com/cri-o/cri-o | 1.23.2 | GHSA-6x2m-w449-qwx7 |
| Go | github.com/cri-o/cri-o | 1.19.6, 1.20.7, 1.21.6, 1.22.3, 1.23.2 | GO-2022-0354 |
Affected products (as reported)
Weakness: CWE-94
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2059475 x_refsource_MISC
- https://github.com/cri-o/cri-o/security/advisories/GHSA-6x2m-w449-qwx7 x_refsource_MISC