2 lines
3.9 KiB
JSON
2 lines
3.9 KiB
JSON
{"affected":[{"affectedData":[{"product":"CRI-O","vendor":"n/a","versions":[{"status":"affected","version":"cri-o 1.24.0, cri-o 1.23.2, cri-o 1.22.3, cri-o 1.21.6, cri-o 1.20.7, cri-o 1.19.6"}]}],"source":"secalert@redhat.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:kubernetes:cri-o:*:*:*:*:*:*:*:*","matchCriteriaId":"70F9AEC5-AB20-4E02-8562-B400B2F796DD","versionEndExcluding":"1.19.6","versionStartIncluding":"1.19.0","vulnerable":true},{"criteria":"cpe:2.3:a:kubernetes:cri-o:*:*:*:*:*:*:*:*","matchCriteriaId":"3EC80AA9-7E85-408A-B2E8-873F648933C4","versionEndExcluding":"1.20.7","versionStartIncluding":"1.20.0","vulnerable":true},{"criteria":"cpe:2.3:a:kubernetes:cri-o:*:*:*:*:*:*:*:*","matchCriteriaId":"60F1AA21-C728-478B-B5B6-B76F06107069","versionEndExcluding":"1.21.6","versionStartIncluding":"1.21.0","vulnerable":true},{"criteria":"cpe:2.3:a:kubernetes:cri-o:*:*:*:*:*:*:*:*","matchCriteriaId":"B95404BE-E267-4DE9-9D66-7EB535D32DA1","versionEndExcluding":"1.22.3","versionStartIncluding":"1.22.0","vulnerable":true},{"criteria":"cpe:2.3:a:kubernetes:cri-o:*:*:*:*:*:*:*:*","matchCriteriaId":"B2E27FBE-1FEE-496C-A677-FEBA235F4380","versionEndExcluding":"1.23.2","versionStartIncluding":"1.23.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime to achieve a container escape and arbitrary code execution as root on the cluster node, where the malicious pod was deployed."},{"lang":"es","value":"Se ha encontrado un fallo en CRI-O en la forma de establecer las opciones del kernel para un pod. Este problema permite a cualquier persona con derechos desplegar un pod en un clúster Kubernetes que usa el tiempo de ejecución de CRI-O para lograr un escape del contenedor y la ejecución de código arbitrario como root en el nodo del clúster, donde fue desplegado el pod malicioso"}],"id":"CVE-2022-0811","lastModified":"2026-06-17T04:21:17.997","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"SINGLE","availabilityImpact":"COMPLETE","baseScore":9.0,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":8.0,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2022-03-16T15:15:16.123","references":[{"source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2059475"},{"source":"secalert@redhat.com","tags":["Third Party Advisory"],"url":"https://github.com/cri-o/cri-o/security/advisories/GHSA-6x2m-w449-qwx7"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2059475"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://github.com/cri-o/cri-o/security/advisories/GHSA-6x2m-w449-qwx7"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-94"}],"source":"secalert@redhat.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-94"}],"source":"nvd@nist.gov","type":"Primary"}]}
|