CVE-2022-0532CWE-732

An incorrect sysctls validation vulnerability was found in CRI-O 1.18 and earlier

published February 9, 2022

CVSS
—
EPSS
1%
Percentile
55.0
In the wild
Unconfirmed
What it is

An incorrect sysctls validation vulnerability was found in CRI-O 1.18 and earlier. The sysctls from the list of "safe" sysctls specified for the cluster will be applied to the host if an attacker is able to create a pod with a hostIPC and hostNetwork kernel namespace.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00765 · 55.0th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2022-02-09T22:05Z
EPSS history
Timeline
  • 09 FEB 22:05Z
    An incorrect sysctls validation vulnerability was found in CRI-O 1.18 and earlier
    cvelistv5