CVE-2022-0567

Severity: critical (CVSS 9.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-04-20 · updated 2026-06-17
Weakness: CWE-20

Description

A flaw was found in ovn-kubernetes. This flaw allows a system administrator or privileged attacker to create an egress network policy that bypasses existing ingress policies of other pods in a cluster, allowing network traffic to access pods that should not be reachable. This issue results in information disclosure and other attacks on other pods that should not be reachable.

Affected products

ovn-kubernetes: before 4.7.47; from 4.8.0 before 4.8.36; from 4.9.0 before 4.9.27; from 4.10.0 before 4.10.8 — fixed in 4.10.8, 4.7.47, 4.8.36, 4.9.27

How to fix

Upgrade to a fixed version: ovn-kubernetes 4.10.8, 4.7.47, 4.8.36, 4.9.27. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-0567 or the next vulnerability affects your stack