Vulnerability Database
289,599
Total vulnerabilities in the database
CVE-2022-0532
An incorrect sysctls validation vulnerability was found in CRI-O 1.18 and earlier. The sysctls from the list of "safe" sysctls specified for the cluster will be applied to the host if an attacker is able to create a pod with a hostIPC and hostNetwork kernel namespace.
| Software | From | Fixed in |
|---|---|---|
| kubernetes / cri-o | - | 1.18.x |
| redhat / openshift_container_platform | 4.0 | 4.0.x |
github.com/cri-o/cri-o
|
- | 1.23.1 |