CVE-2022-29179

HIGH Year: 2022
CVSS v3 Score
8.2
High
CVSS v2 Score
7.2
High
Weakness Type
CWE-269
View all →

Vulnerability Description

Cilium is open source software for providing and securing network connectivity and loadbalancing between application workloads. Prior to versions 1.9.16, 1.10.11, and 1.11.15, if an attacker is able to perform a container escape of a container running as root on a host where Cilium is installed, the attacker can escalate privileges to cluster admin by using Cilium's Kubernetes service account. The problem has been fixed and the patch is available in versions 1.9.16, 1.10.11, and 1.11.5. There are no known workarounds available.

Related Vulnerabilities

CVE-2018-3682

HIGH
CVSS:8.2(High)

BMC Firmware in Intel server boards, compute modules, and systems potentially allow an attacker with administrative privileges to make unauthorized read\writes to the SMBUS.

CWE-2692018

CVE-2019-17202

HIGH
CVSS:8.2(High)

FastTrack Admin By Request 6.1.0.0 supports group policies that are supposed to allow only a select range of users to elevate to Administrator privilege at will. If a user does not have direct access ...

CWE-2692019

CVE-2019-3617

HIGH
CVSS:8.2(High)

Privilege escalation vulnerability in McAfee Total Protection (ToPS) for Mac OS prior to 4.6 allows local users to gain root privileges via incorrect protection of temporary files.

CWE-2692019

CVE-2020-35517

HIGH
CVSS:8.2(High)

A flaw was found in qemu. A host privilege escalation issue was found in the virtio-fs shared file system daemon where a privileged guest user is able to create a device special file in the shared dir...

CWE-2692020

CVE-2021-31937

HIGH
CVSS:8.2(High)

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

CWE-2692021

CVE-2023-21990

HIGH
CVSS:8.2(High)

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.44 and Prior to 7.0.8. Easily exploitable vulnerabil...

CWE-2692023