Vulnerability Database

296,733

Total vulnerabilities in the database

CVE-2022-0811

A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime to achieve a container escape and arbitrary code execution as root on the cluster node, where the malicious pod was deployed.

CVSS v3:

  • Severity: High
  • Score: 8.8
  • AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: High
  • Score: 9
  • AV:N/AC:L/Au:S/C:C/I:C/A:C

CWEs:

Software From Fixed in
kubernetes / cri-o 1.23.0 1.23.2
kubernetes / cri-o 1.22.0 1.22.3
kubernetes / cri-o 1.21.0 1.21.6
kubernetes / cri-o 1.20.0 1.20.7
kubernetes / cri-o 1.19.0 1.19.6
Go icon github.com/cri-o/cri-o 1.19.0 1.19.6
Go icon github.com/cri-o/cri-o 1.20.0 1.20.7
Go icon github.com/cri-o/cri-o 1.21.0 1.21.6
Go icon github.com/cri-o/cri-o 1.22.0 1.22.3
Go icon github.com/cri-o/cri-o 1.23.0 1.23.2