CVE-2022-0567

mediumPriorität · verfolgen · 36EPSS 0.010 · 64. PerzentilEURUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
1.04% (64th) EPSS
CVSS 6.5 · medium
Is it mine?
1,900 products
Prüfe deine Angriffsfläche
Who says so?
5 sources
cnnvd · enisa_euvd · fstec_bdu · nvd

EPSS · bewertet 2026-10-26

A flaw was found in ovn-kubernetes. This flaw allows a system administrator or privileged attacker to create an egress network policy that bypasses existing ingress policies of other pods in a cluster, allowing network traffic to access pods that should not be reachable. This issue results in information disclosure and other attacks on other pods that should not be reachable.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • Behobenopenshift4/ose-ovn-kubernetes@sha256:274c5532deb626af11c188cdc9a6a9dbab7e5e8a68b6b69e7a1ba52c0f34bdf7_ppc64le as a component of Red Hat OpenShift Container Platform 4.8redhat_csaf

    For OpenShift Container Platform 4.8 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.8/updating/updating-cluster-cli.html

    https://access.redhat.com/errata/RHSA-2022:1154
  • Behobenopenshift4/ose-ovn-kubernetes@sha256:39652d31ba2dcda6bc76d759013b1a3af08b0d0fd57b1d4a255424007321d357_s390x as a component of Red Hat OpenShift Container Platform 4.8redhat_csaf

    For OpenShift Container Platform 4.8 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.8/updating/updating-cluster-cli.html

    https://access.redhat.com/errata/RHSA-2022:1154
  • Behobenopenshift4/ose-ovn-kubernetes@sha256:74094cc0214680757da8ff4fa443fd001da6733da200bc24713b1e643a03f638_amd64 as a component of Red Hat OpenShift Container Platform 4.8redhat_csaf

    For OpenShift Container Platform 4.8 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.8/updating/updating-cluster-cli.html

    https://access.redhat.com/errata/RHSA-2022:1154
  • Behobenopenshift4/ose-ovn-kubernetes@sha256:18967a49dacf078b412f082a0f07a26f241b4864a182ac4b2e2c6275d800bfd8_ppc64le as a component of Red Hat OpenShift Container Platform 4.9redhat_csaf

    For OpenShift Container Platform 4.9 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.9/updating/updating-cluster-cli.html

    https://access.redhat.com/errata/RHSA-2022:1158
  • Behobenopenshift4/ose-ovn-kubernetes@sha256:4f33b9441efda970bd8c06bd471a60f2e75616206f1b762360852778e318cad1_s390x as a component of Red Hat OpenShift Container Platform 4.9redhat_csaf

    For OpenShift Container Platform 4.9 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.9/updating/updating-cluster-cli.html

    https://access.redhat.com/errata/RHSA-2022:1158
  • Behobenopenshift4/ose-ovn-kubernetes@sha256:9b3613347ebf7a7a70546c3fc6c53ea628234ccfb7559d5bb1f3b34b4c28a07c_amd64 as a component of Red Hat OpenShift Container Platform 4.9redhat_csaf

    For OpenShift Container Platform 4.9 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.9/updating/updating-cluster-cli.html

    https://access.redhat.com/errata/RHSA-2022:1158
  • Behobenopenshift4/ose-ovn-kubernetes@sha256:d5f6d3ba73a71819b069827983745c0bef2923134d94f01804cb847714a24ea0_arm64 as a component of Red Hat OpenShift Container Platform 4.9redhat_csaf

    For OpenShift Container Platform 4.9 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.9/updating/updating-cluster-cli.html

    https://access.redhat.com/errata/RHSA-2022:1158
  • Behobenopenshift4/ose-ovn-kubernetes@sha256:80e2b22207f7b229cf4c9498df79eecb481599a0f5301a0d99f5de04a7ab9dad_amd64 as a component of Red Hat OpenShift Container Platform 4.10redhat_csaf

    For OpenShift Container Platform 4.10 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html

    https://access.redhat.com/errata/RHSA-2022:1162
  • Behobenopenshift4/ose-ovn-kubernetes@sha256:8d3be8b6e61f1a9544cbd1e18f65c830d5a77d75d11672bebff64e24e7365e14_s390x as a component of Red Hat OpenShift Container Platform 4.10redhat_csaf

    For OpenShift Container Platform 4.10 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html

    https://access.redhat.com/errata/RHSA-2022:1162
  • Behobenopenshift4/ose-ovn-kubernetes@sha256:92f269ef8e0c35aef3acbdb6124c51bb8a4515cbbf22a2b3b92ae538c7e6e377_arm64 as a component of Red Hat OpenShift Container Platform 4.10redhat_csaf

    For OpenShift Container Platform 4.10 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html

    https://access.redhat.com/errata/RHSA-2022:1162
  • Behobenopenshift4/ose-ovn-kubernetes@sha256:f95ee7a0bf1664ccc0f0143cf91465bb10c6cbf2e519008b4bc97504e89c9c24_ppc64le as a component of Red Hat OpenShift Container Platform 4.10redhat_csaf

    For OpenShift Container Platform 4.10 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html

    https://access.redhat.com/errata/RHSA-2022:1162
  • Behobenopenshift4/ose-ovn-kubernetes@sha256:1892aa63004f309aaee2accb4bb26b535176190c86691dbdd40ba6830533a0ea_amd64 as a component of Red Hat OpenShift Container Platform 4.7redhat_csaf

    For OpenShift Container Platform 4.7 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.7/updating/updating-cluster-cli.html

    https://access.redhat.com/errata/RHSA-2022:1166
  • Behobenopenshift4/ose-ovn-kubernetes@sha256:2e33732023c96c91ba3f4a4d2590e090e62a873df29b38f07d4a6b5a45d4e253_ppc64le as a component of Red Hat OpenShift Container Platform 4.7redhat_csaf

    For OpenShift Container Platform 4.7 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.7/updating/updating-cluster-cli.html

    https://access.redhat.com/errata/RHSA-2022:1166
  • Behobenopenshift4/ose-ovn-kubernetes@sha256:2eb43eacf718f7f9f2d581d79129e0511f6664b98c5c4c5952d2326ee9346597_s390x as a component of Red Hat OpenShift Container Platform 4.7redhat_csaf

    For OpenShift Container Platform 4.7 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.7/updating/updating-cluster-cli.html

    https://access.redhat.com/errata/RHSA-2022:1166
02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

9.1
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–critical · 6.5–9.1

v2.06.5mediumAV:N/AC:L/Au:S/C:P/I:P/A:Pprimary · NVD / NIST USAusnutzbarkeit 8 · Auswirkung 6.4
v3.19.1criticalCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 2.3 · Auswirkung 6
v3.19.1criticalAV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU
v3.18.3highCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
v3.18.2highCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:Lsecondary · Red Hat Product Security US
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-179USCWE-20USCWE-20US
04

betroffene Produkte (1,900)

Betroffene Produkte und Versionsbereiche.

20 von 1,900 angezeigt
05

Advisories (4)

Hersteller- und Ökosystem-Meldungen dazu.

  • RHSA-2022:1154Red Hat Security Advisory: OpenShift Container Platform 4.8.36 security update2022-04-11csaf · redhat_csafUS

    Red Hat OpenShift Container Platform release 4.8.36 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • RHSA-2022:1158Red Hat Security Advisory: OpenShift Container Platform 4.9.27 bug fix and security update2022-04-08csaf · redhat_csafUS

    Red Hat OpenShift Container Platform release 4.9.27 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • RHSA-2022:1162Red Hat Security Advisory: OpenShift Container Platform 4.10.8 bug fix and security update2022-04-08csaf · redhat_csafUS

    Red Hat OpenShift Container Platform release 4.10.8 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.10. Red Hat Product Security has rated this update as having a security impact of important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • RHSA-2022:1166Red Hat Security Advisory: OpenShift Container Platform 4.7.47 bug fix and security update2022-04-11csaf · redhat_csafUS

    Red Hat OpenShift Container Platform release 4.7.47 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

06

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

07

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bdunvdredhat_csafNVDCVE.orgMITRE
veröffentlicht 2022-04-20geändert 2026-06-17
08

Referenzen (9)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan