{"metadata": {"vulnerability": "CVE-2022-0811", "count": 139, "kinds": {"milestone": 16, "sighting": 18, "kev": 0, "other": 105}, "linked_omitted": 0}, "data": [{"timestamp": "2022-01-27T00:00:00Z", "date_only": false, "value": "2022-01-27T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022:0866", "record": "RHSA-2022:0866", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2022-01-27T00:00:00Z", "date_only": false, "value": "2022-01-27T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022:0870", "record": "RHSA-2022:0870", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2022-01-27T00:00:00Z", "date_only": false, "value": "2022-01-27T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022_0866", "record": "RHSA-2022_0866", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2022-01-27T00:00:00Z", "date_only": false, "value": "2022-01-27T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022_0870", "record": "RHSA-2022_0870", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2022-02-07T00:00:00Z", "date_only": false, "value": "2022-02-07T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:0866", "record": "RHSA-2022:0866", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2022-02-07T00:00:00Z", "date_only": false, "value": "2022-02-07T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:0870", "record": "RHSA-2022:0870", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2022-02-07T00:00:00Z", "date_only": false, "value": "2022-02-07T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022_0866", "record": "RHSA-2022_0866", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2022-02-07T00:00:00Z", "date_only": false, "value": "2022-02-07T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022_0870", "record": "RHSA-2022_0870", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2022-02-15T00:00:00Z", "date_only": false, "value": "2022-02-15T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:0871", "record": "RHSA-2022:0871", "field": "vulnerabilities.1.discovery_date", "linked_record": true}, {"timestamp": "2022-02-15T00:00:00Z", "date_only": false, "value": "2022-02-15T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022_0871", "record": "RHSA-2022_0871", "field": "vulnerabilities.1.discovery_date", "linked_record": true}, {"timestamp": "2022-02-15T00:00:00Z", "date_only": false, "value": "2022-02-15T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022:0871", "record": "RHSA-2022:0871", "field": "vulnerabilities.1.release_date", "linked_record": true}, {"timestamp": "2022-02-15T00:00:00Z", "date_only": false, "value": "2022-02-15T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022_0871", "record": "RHSA-2022_0871", "field": "vulnerabilities.1.release_date", "linked_record": true}, {"timestamp": "2022-03-01T00:00:00Z", "date_only": false, "value": "2022-03-01T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:0810", "record": "RHSA-2022:0810", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-01T00:00:00Z", "date_only": false, "value": "2022-03-01T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:0860", "record": "RHSA-2022:0860", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-01T00:00:00Z", "date_only": false, "value": "2022-03-01T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:0866", "record": "RHSA-2022:0866", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-01T00:00:00Z", "date_only": false, "value": "2022-03-01T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:0870", "record": "RHSA-2022:0870", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-01T00:00:00Z", "date_only": false, "value": "2022-03-01T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:0871", "record": "RHSA-2022:0871", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-01T00:00:00Z", "date_only": false, "value": "2022-03-01T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022_0810", "record": "RHSA-2022_0810", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-01T00:00:00Z", "date_only": false, "value": "2022-03-01T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022_0860", "record": "RHSA-2022_0860", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-01T00:00:00Z", "date_only": false, "value": "2022-03-01T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022_0866", "record": "RHSA-2022_0866", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-01T00:00:00Z", "date_only": false, "value": "2022-03-01T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022_0870", "record": "RHSA-2022_0870", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-01T00:00:00Z", "date_only": false, "value": "2022-03-01T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022_0871", "record": "RHSA-2022_0871", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-01T00:00:00Z", "date_only": false, "value": "2022-03-01T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-0811", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-03-02T00:00:00Z", "date_only": false, "value": "2022-03-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-0811", "record": "MSRC_CVE-2022-0811", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-15T00:00:00Z", "date_only": true, "value": "2022-03-15", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2022-0811", "record": "GSD-2022-0811", "field": "namespaces.gitlab.com.advisories.0.pubdate", "linked_record": true}, {"timestamp": "2022-03-15T14:00:00Z", "date_only": false, "value": "2022-03-15T14:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022:0810", "record": "RHSA-2022:0810", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-15T14:00:00Z", "date_only": false, "value": "2022-03-15T14:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022:0860", "record": "RHSA-2022:0860", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-15T14:00:00Z", "date_only": false, "value": "2022-03-15T14:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022:0866", "record": "RHSA-2022:0866", "field": "vulnerabilities.1.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-15T14:00:00Z", "date_only": false, "value": "2022-03-15T14:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022:0870", "record": "RHSA-2022:0870", "field": "vulnerabilities.1.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-15T14:00:00Z", "date_only": false, "value": "2022-03-15T14:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022:0871", "record": "RHSA-2022:0871", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-15T14:00:00Z", "date_only": false, "value": "2022-03-15T14:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022_0810", "record": "RHSA-2022_0810", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-15T14:00:00Z", "date_only": false, "value": "2022-03-15T14:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022_0860", "record": "RHSA-2022_0860", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-15T14:00:00Z", "date_only": false, "value": "2022-03-15T14:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022_0866", "record": "RHSA-2022_0866", "field": "vulnerabilities.1.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-15T14:00:00Z", "date_only": false, "value": "2022-03-15T14:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022_0870", "record": "RHSA-2022_0870", "field": "vulnerabilities.1.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-15T14:00:00Z", "date_only": false, "value": "2022-03-15T14:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022_0871", "record": "RHSA-2022_0871", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-15T20:13:38Z", "date_only": false, "value": "2022-03-15T20:13:38Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6X2M-W449-QWX7", "record": "GHSA-6X2M-W449-QWX7", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-15T23:18:22Z", "date_only": false, "value": "2022-03-15T23:18:22+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0810", "record": "RHSA-2022:0810", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2022-03-15T23:18:22Z", "date_only": false, "value": "2022-03-15T23:18:22+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022_0810", "record": "RHSA-2022_0810", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2022-03-15T23:18:22Z", "date_only": false, "value": "2022-03-15T23:18:22+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2022:0810", "record": "RHSA-2022:0810", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-15T23:18:22Z", "date_only": false, "value": "2022-03-15T23:18:22+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2022_0810", "record": "RHSA-2022_0810", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-15T23:18:22Z", "date_only": false, "value": "2022-03-15T23:18:22+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2022:0810", "record": "RHSA-2022:0810", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-15T23:18:22Z", "date_only": false, "value": "2022-03-15T23:18:22+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2022_0810", "record": "RHSA-2022_0810", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-16T14:03:39Z", "date_only": false, "value": "2022-03-16T14:03:39.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat", "record": "CVE-2022-0811", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-03-16T14:03:40Z", "date_only": false, "value": "2022-03-16T14:03:40.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-0811", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-03-16T15:15:00Z", "date_only": false, "value": "2022-03-16T15:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6X2M-W449-QWX7", "record": "GHSA-6X2M-W449-QWX7", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2022-03-16T15:15:00Z", "date_only": false, "value": "2022-03-16T15:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-0811", "record": "GSD-2022-0811", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2022-03-16T15:15:16.123Z", "date_only": false, "value": "2022-03-16T15:15:16.123", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-0811", "record": "FKIE_CVE-2022-0811", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-16T17:20:37Z", "date_only": false, "value": "2022-03-16T17:20:37.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/39034", "record": "CVE-2022-0811", "field": "creation_timestamp", "uuid": "dd3b94c0-f8bb-44e4-befe-cc3645082906", "content": "\u203c CVE-2022-0811 \u203c\n\nA flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime to achieve a container escape and arbitrary code execution as root on the cluster node, where the malicious pod was deployed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/39034"}, {"timestamp": "2022-03-17T08:46:54Z", "date_only": false, "value": "2022-03-17T08:46:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/9049", "record": "CVE-2022-0811", "field": "creation_timestamp", "uuid": "d147191a-58e6-49fd-9686-82d1451768dc", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Zero-Day: CrowdStrike\u2019s Cloud Threat Research team discovered a new vulnerability (CVE-2022-0811) in CRI-O (a container runtime engine underpinning Kubernetes). Dubbed \u201ccr8escape,\u201d when invoked, an attacker could escape from a Kubernetes container and gain root access to the host and be able to move anywhere in the cluster. Invocation of CVE-2022-0811 can allow an attacker to perform a variety of actions on objectives, including execution of malware, exfiltration of data and lateral movement across pods.\n\nInvocation of CVE-2022-0811 can allow an attacker to perform a variety of actions on objectives, including execution of malware, exfiltration of data, and lateral movement across pods.\n\nhttps://www.crowdstrike.com/blog/cr8escape-new-vulnerability-discovered-in-cri-o-container-engine-cve-2022-0811/\n\nhttps://thehackernews.com/2022/03/new-vulnerability-in-cri-o-engine-lets.html", "url": "https://t.me/cKure/9049", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-03-17T14:30:04Z", "date_only": false, "value": "2022-03-17T14:30:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/true_secator/2743", "record": "CVE-2022-0811", "field": "creation_timestamp", "uuid": "2127d0c6-966d-4c20-ba1d-b2332c9fc341", "content": "\u041a\u043e\u043c\u0430\u043d\u0434\u0430 CrowdStrike Cloud Threat Research \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043d\u043e\u043c \u0434\u0432\u0438\u0436\u043a\u0435 CRI-O Container Engine \u0434\u043b\u044f Kubernetes, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f root-\u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0445\u043e\u0441\u0442\u0443.\n\nCRI-O \u2013 \u044d\u0442\u043e \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043d\u0430 OCI (Open Container Initiative) \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f Kubernetes Container Runtime Interface (CRI), \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043e\u0431\u043e\u0439 \u043e\u0431\u043b\u0435\u0433\u0447\u0435\u043d\u043d\u0443\u044e \u0441\u0440\u0435\u0434\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0434\u043b\u044f Kubernetes \u0438 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0430\u044f \u0434\u043b\u044f \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 \u043c\u0435\u0436\u0434\u0443 \u0441\u0440\u0435\u0434\u0430\u043c\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u044b\u043c\u0438 \u0441 OCI, \u0438 kubelet.\n\n\u041f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 cr8escape \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2022-0811 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u044f\u0434\u0440\u0430, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0445 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 pinns.\u00a0\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0430 \u0432 CRI-O \u0432\u0435\u0440\u0441\u0438\u0438 1.19, \u043a\u043e\u0433\u0434\u0430 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0431\u044b\u043b\u0430 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 sysctl, \u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c kernel.core_pattern \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430. \n\n\u041e\u0446\u0435\u043d\u043a\u0430 CVE \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 8,8 (\u0432\u044b\u0441\u043e\u043a\u0430\u044f), \u0430 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0448\u0438\u0440\u043e\u043a\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043c\u043d\u043e\u0433\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 CRI-O \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\u00a0\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f cr8escape \u043f\u043e\u043c\u0438\u043c\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0438 \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0439\u0442\u0438 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 Kubernetes, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0445\u043e\u0441\u0442\u0443 \u0438 \u0438\u043c\u0435\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435. \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u043f\u0440\u0430\u0432\u0430 \u043d\u0430 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u043c\u043e\u0434\u0443\u043b\u044f \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435 Kubernetes, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0441\u0440\u0435\u0434\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f CRI-O. \n\nCrowdStrke \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 POC, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 PodSpec \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 \u044f\u0434\u0440\u0430 kernel.core_pattern, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044f \u043f\u043e\u0434 root \u0434\u0432\u043e\u0438\u0447\u043d\u044b\u0439 \u0444\u0430\u0439\u043b, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0439 \u0432 \u0434\u0440\u0443\u0433\u043e\u043c \u043c\u043e\u0434\u0443\u043b\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 CRI-O v1.23.2, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438. \u0418\u043b\u0438 \u0436\u0435 \u043c\u043e\u0436\u043d\u043e \u043e\u0442\u043a\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u0434\u043e CRI-O \u0432\u0435\u0440\u0441\u0438\u0438 1.18 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0435\u0439.", "url": "https://t.me/true_secator/2743", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-03-17T17:37:10Z", "date_only": false, "value": "2022-03-17T17:37:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ggfcvj/3268", "record": "CVE-2022-0811", "field": "creation_timestamp", "uuid": "e1426be2-1a6e-49e5-96d1-518fbe4b774e", "content": "\u0623\u0628\u0644\u063a \u0641\u0631\u064a\u0642 CrowdStrike Cloud Threat Research \u0639\u0646 \u0648\u062c\u0648\u062f \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u062e\u0637\u064a\u0631\u0629 \u0641\u064a CRI-O Container Engine for Kubernetes \u0648\u0627\u0644\u062a\u064a \u064a\u0645\u0643\u0646 \u0627\u0633\u062a\u062e\u062f\u0627\u0645\u0647\u0627 \u0644\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u062d\u0627\u0648\u064a\u0629 \u0648\u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0648\u0635\u0648\u0644 \u0627\u0644\u062c\u0630\u0631 \u0625\u0644\u0649 \u0645\u0636\u064a\u0641.\n\nCRI-O \u0647\u0648 \u062a\u0637\u0628\u064a\u0642 \u064a\u0639\u062a\u0645\u062f \u0639\u0644\u0649 OCI (\u0645\u0628\u0627\u062f\u0631\u0629 \u0627\u0644\u062d\u0627\u0648\u064a\u0629 \u0627\u0644\u0645\u0641\u062a\u0648\u062d\u0629) \u0644\u0648\u0627\u062c\u0647\u0629 Kubernetes Container Runtime (CRI) \u0627\u0644\u062a\u064a \u062a\u0645\u062b\u0644 \u0648\u0642\u062a \u062a\u0634\u063a\u064a\u0644 \u062d\u0627\u0648\u064a\u0629 \u062e\u0641\u064a\u0641 \u0627\u0644\u0648\u0632\u0646 \u0644\u0640 Kubernetes \u0627\u0644\u0645\u0635\u0645\u0645\u0629 \u0644\u0644\u062a\u0643\u0627\u0645\u0644 \u0628\u064a\u0646 \u0623\u0648\u0642\u0627\u062a \u0627\u0644\u062a\u0634\u063a\u064a\u0644 \u0627\u0644\u0645\u062a\u0648\u0627\u0641\u0642\u0629 \u0645\u0639 OCI \u0648 kubelets.\n\n\u064a\u064f\u0637\u0644\u0642 \u0639\u0644\u0649 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0633\u0645 cr8escape \u0648\u062a\u0639\u0642\u0628\u0647\u0627 \u0643\u0640 CVE-2022-0811 \u060c \u0648\u0647\u064a \u0646\u0627\u062a\u062c\u0629 \u0639\u0646 \u0639\u062f\u0645 \u0648\u062c\u0648\u062f \u0627\u0644\u062a\u062d\u0642\u0642 \u0627\u0644\u0645\u0646\u0627\u0633\u0628 \u0645\u0646 \u0645\u0639\u0644\u0645\u0627\u062a kernel \u0627\u0644\u062a\u064a \u062a\u0645 \u062a\u0645\u0631\u064a\u0631\u0647\u0627 \u0625\u0644\u0649 \u0627\u0644\u0623\u062f\u0627\u0629 \u0627\u0644\u0645\u0633\u0627\u0639\u062f\u0629 pinns. \u0646\u0634\u0623\u062a \u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u0641\u064a \u0627\u0644\u0625\u0635\u062f\u0627\u0631 1.19 \u0645\u0646 CRI-O \u060c \u0639\u0646\u062f\u0645\u0627 \u062a\u0645\u062a \u0625\u0636\u0627\u0641\u0629 \u062f\u0639\u0645 sysctl \u0625\u0644\u0649 \u0645\u062d\u0631\u0643 \u0627\u0644\u062d\u0627\u0648\u064a\u0629 \u060c \u0648\u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0625\u0633\u0627\u0621\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062e\u064a\u0627\u0631 kernel.core_pattern \u0644\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u0627\u0644\u062d\u0627\u0648\u064a\u0629.\n\n\u062f\u0631\u062c\u0629 CVE \u0647\u064a 8.8 (\u0639\u0627\u0644\u064a\u0629) \u0648\u0627\u0644\u062a\u0623\u062b\u064a\u0631 \u0627\u0644\u0645\u062d\u062a\u0645\u0644 \u0648\u0627\u0633\u0639 \u0627\u0644\u0627\u0646\u062a\u0634\u0627\u0631 \u0644\u0623\u0646 \u0627\u0644\u0639\u062f\u064a\u062f \u0645\u0646 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0648\u0627\u0644\u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0623\u0633\u0627\u0633\u064a\u0629 \u062a\u0633\u062a\u062e\u062f\u0645 CRI-O \u0627\u0641\u062a\u0631\u0627\u0636\u064a\u064b\u0627.\n\n\u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u060c \u0628\u0641\u0636\u0644 cr8escape \u060c \u0628\u0627\u0644\u0625\u0636\u0627\u0641\u0629 \u0625\u0644\u0649 \u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0636\u0627\u0631\u0629 \u0648\u062a\u0633\u0644\u0644 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u060c \u0627\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u062d\u0627\u0648\u064a\u0629 Kubernetes \u060c \u0648\u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0648\u0635\u0648\u0644 \u0627\u0644\u062c\u0630\u0631 \u0625\u0644\u0649 \u0627\u0644\u0645\u0636\u064a\u0641 \u060c \u0648\u0627\u0644\u0642\u062f\u0631\u0629 \u0639\u0644\u0649 \u0627\u0644\u062a\u062d\u0631\u0643 \u0623\u0641\u0642\u064a\u064b\u0627 \u0641\u064a \u0627\u0644\u0645\u062c\u0645\u0648\u0639\u0629. \u064a\u062a\u0637\u0644\u0628 \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0625\u0630\u0646\u064b\u0627 \u0644\u0646\u0634\u0631 \u0627\u0644\u0648\u062d\u062f\u0629 \u0641\u064a \u0645\u062c\u0645\u0648\u0639\u0629 Kubernetes \u0627\u0644\u062a\u064a \u062a\u0633\u062a\u062e\u062f\u0645 \u0648\u0642\u062a \u062a\u0634\u063a\u064a\u0644 CRI-O.\n\n\u0642\u062f\u0645 CrowdStrke \u0623\u064a\u0636\u064b\u0627 POC \u064a\u0633\u062a\u062e\u062f\u0645 PodSpec \u0636\u0627\u0631\u064b\u0627 \u0644\u062a\u0639\u064a\u064a\u0646 \u0645\u0639\u0644\u0645\u0629 kernel kernel.core_pattern \u0639\u0646 \u0637\u0631\u064a\u0642 \u062a\u0634\u063a\u064a\u0644 \u062b\u0646\u0627\u0626\u064a \u0645\u0633\u062a\u0636\u0627\u0641 \u0641\u064a \u0648\u062d\u062f\u0629 \u0646\u0645\u0637\u064a\u0629 \u0623\u062e\u0631\u0649 \u0643\u062c\u0630\u0631.\n\n\u062a\u0645 \u0625\u0635\u0644\u0627\u062d \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0648\u064a\u0646\u0635\u062d \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u0648\u0646 \u0628\u0627\u0644\u062a\u0631\u0642\u064a\u0629 \u0625\u0644\u0649 \u0623\u062d\u062f\u062b \u0625\u0635\u062f\u0627\u0631 \u0645\u0646 CRI-O v1.23.2 \u0644\u0645\u0646\u0639 \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0627\u0644\u0645\u062d\u062a\u0645\u0644\u0629. \u0623\u0648 \u064a\u0645\u0643\u0646\u0643 \u0627\u0644\u0631\u062c\u0648\u0639 \u0625\u0644\u0649 \u0625\u0635\u062f\u0627\u0631 CRI-O 1.18 \u0623\u0648 \u0625\u0635\u062f\u0627\u0631 \u0623\u0642\u062f\u0645.\n\n@A_X_YG\n#\u0627\u0644\u0642\u0627\u0626\u062f_A_X_Y \n#The_Yemeni_ghost", "url": "https://t.me/ggfcvj/3268", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-03-17T18:36:58Z", "date_only": false, "value": "2022-03-17T18:36:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/piratesofyemen/614", "record": "CVE-2022-0811", "field": "creation_timestamp", "uuid": "ced437a4-5f4f-4693-9348-256e37fe24ee", "content": "\u0623\u0628\u0644\u063a \u0641\u0631\u064a\u0642 CrowdStrike Cloud Threat Research \u0639\u0646 \u0648\u062c\u0648\u062f \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u062e\u0637\u064a\u0631\u0629 \u0641\u064a CRI-O Container Engine for Kubernetes \u0648\u0627\u0644\u062a\u064a \u064a\u0645\u0643\u0646 \u0627\u0633\u062a\u062e\u062f\u0627\u0645\u0647\u0627 \u0644\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u062d\u0627\u0648\u064a\u0629 \u0648\u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0648\u0635\u0648\u0644 \u0627\u0644\u062c\u0630\u0631 \u0625\u0644\u0649 \u0645\u0636\u064a\u0641.\n\nCRI-O \u0647\u0648 \u062a\u0637\u0628\u064a\u0642 \u064a\u0639\u062a\u0645\u062f \u0639\u0644\u0649 OCI (\u0645\u0628\u0627\u062f\u0631\u0629 \u0627\u0644\u062d\u0627\u0648\u064a\u0629 \u0627\u0644\u0645\u0641\u062a\u0648\u062d\u0629) \u0644\u0648\u0627\u062c\u0647\u0629 Kubernetes Container Runtime (CRI) \u0627\u0644\u062a\u064a \u062a\u0645\u062b\u0644 \u0648\u0642\u062a \u062a\u0634\u063a\u064a\u0644 \u062d\u0627\u0648\u064a\u0629 \u062e\u0641\u064a\u0641 \u0627\u0644\u0648\u0632\u0646 \u0644\u0640 Kubernetes \u0627\u0644\u0645\u0635\u0645\u0645\u0629 \u0644\u0644\u062a\u0643\u0627\u0645\u0644 \u0628\u064a\u0646 \u0623\u0648\u0642\u0627\u062a \u0627\u0644\u062a\u0634\u063a\u064a\u0644 \u0627\u0644\u0645\u062a\u0648\u0627\u0641\u0642\u0629 \u0645\u0639 OCI \u0648 kubelets.\n\n\u064a\u064f\u0637\u0644\u0642 \u0639\u0644\u0649 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0633\u0645 cr8escape \u0648\u062a\u0639\u0642\u0628\u0647\u0627 \u0643\u0640 CVE-2022-0811 \u060c \u0648\u0647\u064a \u0646\u0627\u062a\u062c\u0629 \u0639\u0646 \u0639\u062f\u0645 \u0648\u062c\u0648\u062f \u0627\u0644\u062a\u062d\u0642\u0642 \u0627\u0644\u0645\u0646\u0627\u0633\u0628 \u0645\u0646 \u0645\u0639\u0644\u0645\u0627\u062a kernel \u0627\u0644\u062a\u064a \u062a\u0645 \u062a\u0645\u0631\u064a\u0631\u0647\u0627 \u0625\u0644\u0649 \u0627\u0644\u0623\u062f\u0627\u0629 \u0627\u0644\u0645\u0633\u0627\u0639\u062f\u0629 pinns. \u0646\u0634\u0623\u062a \u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u0641\u064a \u0627\u0644\u0625\u0635\u062f\u0627\u0631 1.19 \u0645\u0646 CRI-O \u060c \u0639\u0646\u062f\u0645\u0627 \u062a\u0645\u062a \u0625\u0636\u0627\u0641\u0629 \u062f\u0639\u0645 sysctl \u0625\u0644\u0649 \u0645\u062d\u0631\u0643 \u0627\u0644\u062d\u0627\u0648\u064a\u0629 \u060c \u0648\u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0625\u0633\u0627\u0621\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062e\u064a\u0627\u0631 kernel.core_pattern \u0644\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u0627\u0644\u062d\u0627\u0648\u064a\u0629.\n\n\u062f\u0631\u062c\u0629 CVE \u0647\u064a 8.8 (\u0639\u0627\u0644\u064a\u0629) \u0648\u0627\u0644\u062a\u0623\u062b\u064a\u0631 \u0627\u0644\u0645\u062d\u062a\u0645\u0644 \u0648\u0627\u0633\u0639 \u0627\u0644\u0627\u0646\u062a\u0634\u0627\u0631 \u0644\u0623\u0646 \u0627\u0644\u0639\u062f\u064a\u062f \u0645\u0646 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0648\u0627\u0644\u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0623\u0633\u0627\u0633\u064a\u0629 \u062a\u0633\u062a\u062e\u062f\u0645 CRI-O \u0627\u0641\u062a\u0631\u0627\u0636\u064a\u064b\u0627.\n\n\u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u060c \u0628\u0641\u0636\u0644 cr8escape \u060c \u0628\u0627\u0644\u0625\u0636\u0627\u0641\u0629 \u0625\u0644\u0649 \u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0636\u0627\u0631\u0629 \u0648\u062a\u0633\u0644\u0644 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u060c \u0627\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u062d\u0627\u0648\u064a\u0629 Kubernetes \u060c \u0648\u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0648\u0635\u0648\u0644 \u0627\u0644\u062c\u0630\u0631 \u0625\u0644\u0649 \u0627\u0644\u0645\u0636\u064a\u0641 \u060c \u0648\u0627\u0644\u0642\u062f\u0631\u0629 \u0639\u0644\u0649 \u0627\u0644\u062a\u062d\u0631\u0643 \u0623\u0641\u0642\u064a\u064b\u0627 \u0641\u064a \u0627\u0644\u0645\u062c\u0645\u0648\u0639\u0629. \u064a\u062a\u0637\u0644\u0628 \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0625\u0630\u0646\u064b\u0627 \u0644\u0646\u0634\u0631 \u0627\u0644\u0648\u062d\u062f\u0629 \u0641\u064a \u0645\u062c\u0645\u0648\u0639\u0629 Kubernetes \u0627\u0644\u062a\u064a \u062a\u0633\u062a\u062e\u062f\u0645 \u0648\u0642\u062a \u062a\u0634\u063a\u064a\u0644 CRI-O.\n\n\u0642\u062f\u0645 CrowdStrke \u0623\u064a\u0636\u064b\u0627 POC \u064a\u0633\u062a\u062e\u062f\u0645 PodSpec \u0636\u0627\u0631\u064b\u0627 \u0644\u062a\u0639\u064a\u064a\u0646 \u0645\u0639\u0644\u0645\u0629 kernel kernel.core_pattern \u0639\u0646 \u0637\u0631\u064a\u0642 \u062a\u0634\u063a\u064a\u0644 \u062b\u0646\u0627\u0626\u064a \u0645\u0633\u062a\u0636\u0627\u0641 \u0641\u064a \u0648\u062d\u062f\u0629 \u0646\u0645\u0637\u064a\u0629 \u0623\u062e\u0631\u0649 \u0643\u062c\u0630\u0631.\n\n\u062a\u0645 \u0625\u0635\u0644\u0627\u062d \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0648\u064a\u0646\u0635\u062d \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u0648\u0646 \u0628\u0627\u0644\u062a\u0631\u0642\u064a\u0629 \u0625\u0644\u0649 \u0623\u062d\u062f\u062b \u0625\u0635\u062f\u0627\u0631 \u0645\u0646 CRI-O v1.23.2 \u0644\u0645\u0646\u0639 \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0627\u0644\u0645\u062d\u062a\u0645\u0644\u0629. \u0623\u0648 \u064a\u0645\u0643\u0646\u0643 \u0627\u0644\u0631\u062c\u0648\u0639 \u0625\u0644\u0649 \u0625\u0635\u062f\u0627\u0631 CRI-O 1.18 \u0623\u0648 \u0625\u0635\u062f\u0627\u0631 \u0623\u0642\u062f\u0645.\n\n@A_X_YG\n#\u0627\u0644\u0642\u0627\u0626\u062f_A_X_Y \n#The_Yemeni_ghost", "url": "https://t.me/piratesofyemen/614", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-03-17T18:37:02Z", "date_only": false, "value": "2022-03-17T18:37:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/piratesofyemen1213/447", "record": "CVE-2022-0811", "field": "creation_timestamp", "uuid": "21d970ff-b2b5-4c57-b3d4-b516f4993a67", "content": "\u0623\u0628\u0644\u063a \u0641\u0631\u064a\u0642 CrowdStrike Cloud Threat Research \u0639\u0646 \u0648\u062c\u0648\u062f \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u062e\u0637\u064a\u0631\u0629 \u0641\u064a CRI-O Container Engine for Kubernetes \u0648\u0627\u0644\u062a\u064a \u064a\u0645\u0643\u0646 \u0627\u0633\u062a\u062e\u062f\u0627\u0645\u0647\u0627 \u0644\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u062d\u0627\u0648\u064a\u0629 \u0648\u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0648\u0635\u0648\u0644 \u0627\u0644\u062c\u0630\u0631 \u0625\u0644\u0649 \u0645\u0636\u064a\u0641.\n\nCRI-O \u0647\u0648 \u062a\u0637\u0628\u064a\u0642 \u064a\u0639\u062a\u0645\u062f \u0639\u0644\u0649 OCI (\u0645\u0628\u0627\u062f\u0631\u0629 \u0627\u0644\u062d\u0627\u0648\u064a\u0629 \u0627\u0644\u0645\u0641\u062a\u0648\u062d\u0629) \u0644\u0648\u0627\u062c\u0647\u0629 Kubernetes Container Runtime (CRI) \u0627\u0644\u062a\u064a \u062a\u0645\u062b\u0644 \u0648\u0642\u062a \u062a\u0634\u063a\u064a\u0644 \u062d\u0627\u0648\u064a\u0629 \u062e\u0641\u064a\u0641 \u0627\u0644\u0648\u0632\u0646 \u0644\u0640 Kubernetes \u0627\u0644\u0645\u0635\u0645\u0645\u0629 \u0644\u0644\u062a\u0643\u0627\u0645\u0644 \u0628\u064a\u0646 \u0623\u0648\u0642\u0627\u062a \u0627\u0644\u062a\u0634\u063a\u064a\u0644 \u0627\u0644\u0645\u062a\u0648\u0627\u0641\u0642\u0629 \u0645\u0639 OCI \u0648 kubelets.\n\n\u064a\u064f\u0637\u0644\u0642 \u0639\u0644\u0649 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0633\u0645 cr8escape \u0648\u062a\u0639\u0642\u0628\u0647\u0627 \u0643\u0640 CVE-2022-0811 \u060c \u0648\u0647\u064a \u0646\u0627\u062a\u062c\u0629 \u0639\u0646 \u0639\u062f\u0645 \u0648\u062c\u0648\u062f \u0627\u0644\u062a\u062d\u0642\u0642 \u0627\u0644\u0645\u0646\u0627\u0633\u0628 \u0645\u0646 \u0645\u0639\u0644\u0645\u0627\u062a kernel \u0627\u0644\u062a\u064a \u062a\u0645 \u062a\u0645\u0631\u064a\u0631\u0647\u0627 \u0625\u0644\u0649 \u0627\u0644\u0623\u062f\u0627\u0629 \u0627\u0644\u0645\u0633\u0627\u0639\u062f\u0629 pinns. \u0646\u0634\u0623\u062a \u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u0641\u064a \u0627\u0644\u0625\u0635\u062f\u0627\u0631 1.19 \u0645\u0646 CRI-O \u060c \u0639\u0646\u062f\u0645\u0627 \u062a\u0645\u062a \u0625\u0636\u0627\u0641\u0629 \u062f\u0639\u0645 sysctl \u0625\u0644\u0649 \u0645\u062d\u0631\u0643 \u0627\u0644\u062d\u0627\u0648\u064a\u0629 \u060c \u0648\u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0625\u0633\u0627\u0621\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062e\u064a\u0627\u0631 kernel.core_pattern \u0644\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u0627\u0644\u062d\u0627\u0648\u064a\u0629.\n\n\u062f\u0631\u062c\u0629 CVE \u0647\u064a 8.8 (\u0639\u0627\u0644\u064a\u0629) \u0648\u0627\u0644\u062a\u0623\u062b\u064a\u0631 \u0627\u0644\u0645\u062d\u062a\u0645\u0644 \u0648\u0627\u0633\u0639 \u0627\u0644\u0627\u0646\u062a\u0634\u0627\u0631 \u0644\u0623\u0646 \u0627\u0644\u0639\u062f\u064a\u062f \u0645\u0646 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0648\u0627\u0644\u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0623\u0633\u0627\u0633\u064a\u0629 \u062a\u0633\u062a\u062e\u062f\u0645 CRI-O \u0627\u0641\u062a\u0631\u0627\u0636\u064a\u064b\u0627.\n\n\u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u060c \u0628\u0641\u0636\u0644 cr8escape \u060c \u0628\u0627\u0644\u0625\u0636\u0627\u0641\u0629 \u0625\u0644\u0649 \u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0636\u0627\u0631\u0629 \u0648\u062a\u0633\u0644\u0644 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u060c \u0627\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u062d\u0627\u0648\u064a\u0629 Kubernetes \u060c \u0648\u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0648\u0635\u0648\u0644 \u0627\u0644\u062c\u0630\u0631 \u0625\u0644\u0649 \u0627\u0644\u0645\u0636\u064a\u0641 \u060c \u0648\u0627\u0644\u0642\u062f\u0631\u0629 \u0639\u0644\u0649 \u0627\u0644\u062a\u062d\u0631\u0643 \u0623\u0641\u0642\u064a\u064b\u0627 \u0641\u064a \u0627\u0644\u0645\u062c\u0645\u0648\u0639\u0629. \u064a\u062a\u0637\u0644\u0628 \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0625\u0630\u0646\u064b\u0627 \u0644\u0646\u0634\u0631 \u0627\u0644\u0648\u062d\u062f\u0629 \u0641\u064a \u0645\u062c\u0645\u0648\u0639\u0629 Kubernetes \u0627\u0644\u062a\u064a \u062a\u0633\u062a\u062e\u062f\u0645 \u0648\u0642\u062a \u062a\u0634\u063a\u064a\u0644 CRI-O.\n\n\u0642\u062f\u0645 CrowdStrke \u0623\u064a\u0636\u064b\u0627 POC \u064a\u0633\u062a\u062e\u062f\u0645 PodSpec \u0636\u0627\u0631\u064b\u0627 \u0644\u062a\u0639\u064a\u064a\u0646 \u0645\u0639\u0644\u0645\u0629 kernel kernel.core_pattern \u0639\u0646 \u0637\u0631\u064a\u0642 \u062a\u0634\u063a\u064a\u0644 \u062b\u0646\u0627\u0626\u064a \u0645\u0633\u062a\u0636\u0627\u0641 \u0641\u064a \u0648\u062d\u062f\u0629 \u0646\u0645\u0637\u064a\u0629 \u0623\u062e\u0631\u0649 \u0643\u062c\u0630\u0631.\n\n\u062a\u0645 \u0625\u0635\u0644\u0627\u062d \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0648\u064a\u0646\u0635\u062d \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u0648\u0646 \u0628\u0627\u0644\u062a\u0631\u0642\u064a\u0629 \u0625\u0644\u0649 \u0623\u062d\u062f\u062b \u0625\u0635\u062f\u0627\u0631 \u0645\u0646 CRI-O v1.23.2 \u0644\u0645\u0646\u0639 \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0627\u0644\u0645\u062d\u062a\u0645\u0644\u0629. \u0623\u0648 \u064a\u0645\u0643\u0646\u0643 \u0627\u0644\u0631\u062c\u0648\u0639 \u0625\u0644\u0649 \u0625\u0635\u062f\u0627\u0631 CRI-O 1.18 \u0623\u0648 \u0625\u0635\u062f\u0627\u0631 \u0623\u0642\u062f\u0645.\n\n@A_X_YG\n#\u0627\u0644\u0642\u0627\u0626\u062f_A_X_Y \n#The_Yemeni_ghost", "url": "https://t.me/piratesofyemen1213/447", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-03-17T18:37:12Z", "date_only": false, "value": "2022-03-17T18:37:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/anwar1213xx/1819", "record": "CVE-2022-0811", "field": "creation_timestamp", "uuid": "af8efbe5-b042-4661-b703-00b5b81c68b2", "content": "\u0623\u0628\u0644\u063a \u0641\u0631\u064a\u0642 CrowdStrike Cloud Threat Research \u0639\u0646 \u0648\u062c\u0648\u062f \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u062e\u0637\u064a\u0631\u0629 \u0641\u064a CRI-O Container Engine for Kubernetes \u0648\u0627\u0644\u062a\u064a \u064a\u0645\u0643\u0646 \u0627\u0633\u062a\u062e\u062f\u0627\u0645\u0647\u0627 \u0644\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u062d\u0627\u0648\u064a\u0629 \u0648\u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0648\u0635\u0648\u0644 \u0627\u0644\u062c\u0630\u0631 \u0625\u0644\u0649 \u0645\u0636\u064a\u0641.\n\nCRI-O \u0647\u0648 \u062a\u0637\u0628\u064a\u0642 \u064a\u0639\u062a\u0645\u062f \u0639\u0644\u0649 OCI (\u0645\u0628\u0627\u062f\u0631\u0629 \u0627\u0644\u062d\u0627\u0648\u064a\u0629 \u0627\u0644\u0645\u0641\u062a\u0648\u062d\u0629) \u0644\u0648\u0627\u062c\u0647\u0629 Kubernetes Container Runtime (CRI) \u0627\u0644\u062a\u064a \u062a\u0645\u062b\u0644 \u0648\u0642\u062a \u062a\u0634\u063a\u064a\u0644 \u062d\u0627\u0648\u064a\u0629 \u062e\u0641\u064a\u0641 \u0627\u0644\u0648\u0632\u0646 \u0644\u0640 Kubernetes \u0627\u0644\u0645\u0635\u0645\u0645\u0629 \u0644\u0644\u062a\u0643\u0627\u0645\u0644 \u0628\u064a\u0646 \u0623\u0648\u0642\u0627\u062a \u0627\u0644\u062a\u0634\u063a\u064a\u0644 \u0627\u0644\u0645\u062a\u0648\u0627\u0641\u0642\u0629 \u0645\u0639 OCI \u0648 kubelets.\n\n\u064a\u064f\u0637\u0644\u0642 \u0639\u0644\u0649 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0633\u0645 cr8escape \u0648\u062a\u0639\u0642\u0628\u0647\u0627 \u0643\u0640 CVE-2022-0811 \u060c \u0648\u0647\u064a \u0646\u0627\u062a\u062c\u0629 \u0639\u0646 \u0639\u062f\u0645 \u0648\u062c\u0648\u062f \u0627\u0644\u062a\u062d\u0642\u0642 \u0627\u0644\u0645\u0646\u0627\u0633\u0628 \u0645\u0646 \u0645\u0639\u0644\u0645\u0627\u062a kernel \u0627\u0644\u062a\u064a \u062a\u0645 \u062a\u0645\u0631\u064a\u0631\u0647\u0627 \u0625\u0644\u0649 \u0627\u0644\u0623\u062f\u0627\u0629 \u0627\u0644\u0645\u0633\u0627\u0639\u062f\u0629 pinns. \u0646\u0634\u0623\u062a \u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u0641\u064a \u0627\u0644\u0625\u0635\u062f\u0627\u0631 1.19 \u0645\u0646 CRI-O \u060c \u0639\u0646\u062f\u0645\u0627 \u062a\u0645\u062a \u0625\u0636\u0627\u0641\u0629 \u062f\u0639\u0645 sysctl \u0625\u0644\u0649 \u0645\u062d\u0631\u0643 \u0627\u0644\u062d\u0627\u0648\u064a\u0629 \u060c \u0648\u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0625\u0633\u0627\u0621\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062e\u064a\u0627\u0631 kernel.core_pattern \u0644\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u0627\u0644\u062d\u0627\u0648\u064a\u0629.\n\n\u062f\u0631\u062c\u0629 CVE \u0647\u064a 8.8 (\u0639\u0627\u0644\u064a\u0629) \u0648\u0627\u0644\u062a\u0623\u062b\u064a\u0631 \u0627\u0644\u0645\u062d\u062a\u0645\u0644 \u0648\u0627\u0633\u0639 \u0627\u0644\u0627\u0646\u062a\u0634\u0627\u0631 \u0644\u0623\u0646 \u0627\u0644\u0639\u062f\u064a\u062f \u0645\u0646 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0648\u0627\u0644\u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0623\u0633\u0627\u0633\u064a\u0629 \u062a\u0633\u062a\u062e\u062f\u0645 CRI-O \u0627\u0641\u062a\u0631\u0627\u0636\u064a\u064b\u0627.\n\n\u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u060c \u0628\u0641\u0636\u0644 cr8escape \u060c \u0628\u0627\u0644\u0625\u0636\u0627\u0641\u0629 \u0625\u0644\u0649 \u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0636\u0627\u0631\u0629 \u0648\u062a\u0633\u0644\u0644 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u060c \u0627\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u062d\u0627\u0648\u064a\u0629 Kubernetes \u060c \u0648\u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0648\u0635\u0648\u0644 \u0627\u0644\u062c\u0630\u0631 \u0625\u0644\u0649 \u0627\u0644\u0645\u0636\u064a\u0641 \u060c \u0648\u0627\u0644\u0642\u062f\u0631\u0629 \u0639\u0644\u0649 \u0627\u0644\u062a\u062d\u0631\u0643 \u0623\u0641\u0642\u064a\u064b\u0627 \u0641\u064a \u0627\u0644\u0645\u062c\u0645\u0648\u0639\u0629. \u064a\u062a\u0637\u0644\u0628 \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0625\u0630\u0646\u064b\u0627 \u0644\u0646\u0634\u0631 \u0627\u0644\u0648\u062d\u062f\u0629 \u0641\u064a \u0645\u062c\u0645\u0648\u0639\u0629 Kubernetes \u0627\u0644\u062a\u064a \u062a\u0633\u062a\u062e\u062f\u0645 \u0648\u0642\u062a \u062a\u0634\u063a\u064a\u0644 CRI-O.\n\n\u0642\u062f\u0645 CrowdStrke \u0623\u064a\u0636\u064b\u0627 POC \u064a\u0633\u062a\u062e\u062f\u0645 PodSpec \u0636\u0627\u0631\u064b\u0627 \u0644\u062a\u0639\u064a\u064a\u0646 \u0645\u0639\u0644\u0645\u0629 kernel kernel.core_pattern \u0639\u0646 \u0637\u0631\u064a\u0642 \u062a\u0634\u063a\u064a\u0644 \u062b\u0646\u0627\u0626\u064a \u0645\u0633\u062a\u0636\u0627\u0641 \u0641\u064a \u0648\u062d\u062f\u0629 \u0646\u0645\u0637\u064a\u0629 \u0623\u062e\u0631\u0649 \u0643\u062c\u0630\u0631.\n\n\u062a\u0645 \u0625\u0635\u0644\u0627\u062d \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0648\u064a\u0646\u0635\u062d \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u0648\u0646 \u0628\u0627\u0644\u062a\u0631\u0642\u064a\u0629 \u0625\u0644\u0649 \u0623\u062d\u062f\u062b \u0625\u0635\u062f\u0627\u0631 \u0645\u0646 CRI-O v1.23.2 \u0644\u0645\u0646\u0639 \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0627\u0644\u0645\u062d\u062a\u0645\u0644\u0629. \u0623\u0648 \u064a\u0645\u0643\u0646\u0643 \u0627\u0644\u0631\u062c\u0648\u0639 \u0625\u0644\u0649 \u0625\u0635\u062f\u0627\u0631 CRI-O 1.18 \u0623\u0648 \u0625\u0635\u062f\u0627\u0631 \u0623\u0642\u062f\u0645.\n\n@A_X_YG\n#\u0627\u0644\u0642\u0627\u0626\u062f_A_X_Y \n#The_Yemeni_ghost", "url": "https://t.me/anwar1213xx/1819", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-03-18T00:00:00Z", "date_only": true, "value": "2022-03-18", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2022-0811", "record": "GSD-2022-0811", "field": "namespaces.gitlab.com.advisories.0.date", "linked_record": true}, {"timestamp": "2022-03-18T17:47:49Z", "date_only": false, "value": "2022-03-18T17:47:49Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6X2M-W449-QWX7", "record": "GHSA-6X2M-W449-QWX7", "field": "modified", "linked_record": true}, {"timestamp": "2022-03-21T09:29:43Z", "date_only": false, "value": "2022-03-21T09:29:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1693", "record": "CVE-2022-0811", "field": "creation_timestamp", "uuid": "b2cdb276-726a-4c8f-af98-0fd40faf7d46", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aSimple webhook to block exploitation of CVE-2022-0811\nURL\uff1ahttps://github.com/spiarh/webhook-cve-2022-0811\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/1693", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-03-21T12:13:19Z", "date_only": false, "value": "2022-03-21T12:13:19+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0860", "record": "RHSA-2022:0860", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2022-03-21T12:13:19Z", "date_only": false, "value": "2022-03-21T12:13:19+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022_0860", "record": "RHSA-2022_0860", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2022-03-21T12:13:19Z", "date_only": false, "value": "2022-03-21T12:13:19+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2022:0860", "record": "RHSA-2022:0860", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-21T12:13:19Z", "date_only": false, "value": "2022-03-21T12:13:19+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2022_0860", "record": "RHSA-2022_0860", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-21T12:13:19Z", "date_only": false, "value": "2022-03-21T12:13:19+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2022:0860", "record": "RHSA-2022:0860", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-21T12:13:19Z", "date_only": false, "value": "2022-03-21T12:13:19+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2022_0860", "record": "RHSA-2022_0860", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-21T12:13:20Z", "date_only": false, "value": "2022-03-21T12:13:20+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0860", "record": "RHSA-2022:0860", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2022-03-21T12:13:20Z", "date_only": false, "value": "2022-03-21T12:13:20+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022_0860", "record": "RHSA-2022_0860", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2022-03-22T11:02:01Z", "date_only": false, "value": "2022-03-22T11:02:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/5656", "record": "CVE-2022-0811", "field": "creation_timestamp", "uuid": "e6f1f37d-1d51-4679-832b-364ca01b9788", "content": "#Whitepaper\n\"Webhook Security Guidelines\".\n\n]-> Simple webhook to block exploitation of CVE-2022-0811:\nhttps://github.com/spiarh/webhook-cve-2022-0811", "url": "https://t.me/CyberSecurityTechnologies/5656", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-03-22T15:13:38Z", "date_only": false, "value": "2022-03-22T15:13:38+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0870", "record": "RHSA-2022:0870", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2022-03-22T15:13:38Z", "date_only": false, "value": "2022-03-22T15:13:38+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022_0870", "record": "RHSA-2022_0870", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2022-03-22T15:13:38Z", "date_only": false, "value": "2022-03-22T15:13:38+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2022:0870", "record": "RHSA-2022:0870", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-22T15:13:38Z", "date_only": false, "value": "2022-03-22T15:13:38+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2022_0870", "record": "RHSA-2022_0870", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-22T15:13:38Z", "date_only": false, "value": "2022-03-22T15:13:38+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2022:0870", "record": "RHSA-2022:0870", "field": "vulnerabilities.1.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2022-03-22T15:13:38Z", "date_only": false, "value": "2022-03-22T15:13:38+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2022_0870", "record": "RHSA-2022_0870", "field": "vulnerabilities.1.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2022-03-22T17:31:21Z", "date_only": false, "value": "2022-03-22T17:31:21+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0871", "record": "RHSA-2022:0871", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2022-03-22T17:31:21Z", "date_only": false, "value": "2022-03-22T17:31:21+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022_0871", "record": "RHSA-2022_0871", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2022-03-22T17:31:21Z", "date_only": false, "value": "2022-03-22T17:31:21+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2022:0871", "record": "RHSA-2022:0871", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-22T17:31:21Z", "date_only": false, "value": "2022-03-22T17:31:21+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2022_0871", "record": "RHSA-2022_0871", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-22T17:31:21Z", "date_only": false, "value": "2022-03-22T17:31:21+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2022:0871", "record": "RHSA-2022:0871", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-22T17:31:21Z", "date_only": false, "value": "2022-03-22T17:31:21+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2022_0871", "record": "RHSA-2022_0871", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-23T09:51:18Z", "date_only": false, "value": "2022-03-23T09:51:18+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0866", "record": "RHSA-2022:0866", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2022-03-23T09:51:18Z", "date_only": false, "value": "2022-03-23T09:51:18+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022_0866", "record": "RHSA-2022_0866", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2022-03-23T09:51:18Z", "date_only": false, "value": "2022-03-23T09:51:18+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2022:0866", "record": "RHSA-2022:0866", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-23T09:51:18Z", "date_only": false, "value": "2022-03-23T09:51:18+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2022_0866", "record": "RHSA-2022_0866", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-23T09:51:18Z", "date_only": false, "value": "2022-03-23T09:51:18+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2022:0866", "record": "RHSA-2022:0866", "field": "vulnerabilities.1.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2022-03-23T09:51:18Z", "date_only": false, "value": "2022-03-23T09:51:18+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2022_0866", "record": "RHSA-2022_0866", "field": "vulnerabilities.1.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2022-03-28T13:18:00Z", "date_only": false, "value": "2022-03-28T13:18Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-0811", "record": "GSD-2022-0811", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2022-04-12T00:00:00Z", "date_only": false, "value": "2022-04-12T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022:0871", "record": "RHSA-2022:0871", "field": "vulnerabilities.13.release_date", "linked_record": true}, {"timestamp": "2022-04-12T00:00:00Z", "date_only": false, "value": "2022-04-12T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022_0871", "record": "RHSA-2022_0871", "field": "vulnerabilities.13.release_date", "linked_record": true}, {"timestamp": "2022-04-13T00:00:00Z", "date_only": false, "value": "2022-04-13T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:0871", "record": "RHSA-2022:0871", "field": "vulnerabilities.13.discovery_date", "linked_record": true}, {"timestamp": "2022-04-13T00:00:00Z", "date_only": false, "value": "2022-04-13T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022_0871", "record": "RHSA-2022_0871", "field": "vulnerabilities.13.discovery_date", "linked_record": true}, {"timestamp": "2023-03-27T13:14:41Z", "date_only": false, "value": "2023-03-27T13:14:41.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xakep_ru/13806", "record": "CVE-2022-0811", "field": "creation_timestamp", "uuid": "8cf5a701-c83b-486b-b999-6c3d9ce6c60c", "content": "HTB Vessel. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435 Kubernetes #\u0441\u0442\u0430\u0442\u044c\u0438 #\u043f\u043e\u0434\u043f\u0438\u0441\u0447\u0438\u043a\u0430\u043c\n\n\u0412 \u044d\u0442\u043e\u043c \u0440\u0430\u0439\u0442\u0430\u043f\u0435 \u044f \u043f\u043e\u043a\u0430\u0436\u0443, \u043a\u0430\u043a \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-0811, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432\u044b\u0445\u043e\u0434\u0438\u0442\u044c \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435 Kubernetes. \u041f\u043e \u0434\u043e\u0440\u043e\u0433\u0435 \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0438\u043c, \u043a\u0430\u043a \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f Git, \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u0438 \u043f\u043e\u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0438\u043c \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 Open Web Analytics, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0445\u043e\u0441\u0442\u0443. \u0415\u0449\u0435 \u0440\u0430\u0437\u0431\u0435\u0440\u0435\u043c\u0441\u044f \u0441 \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u0443\u0435\u043c PDF-\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442.\n\nhttps://xakep.ru/2023/03/27/htb-vessel/", "url": "https://t.me/xakep_ru/13806", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-07-13T10:44:34Z", "date_only": false, "value": "2023-07-13T10:44:34.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/1987", "record": "CVE-2022-0811", "field": "creation_timestamp", "uuid": "0d4062e5-ff63-47e8-ac7b-99a86909f179", "content": "A new vulnerability (CVE-2022-0811) in the CRI-O engine, dubbed \u201ccr8escape,\u201d could allow attackers to escape Kubernetes containers and gain root access.\n\nRead details: https://thehackernews.com/2022/03/new-vulnerability-in-cri-o-engine-lets.html", "url": "https://t.me/thehackernews/1987"}, {"timestamp": "2023-09-14T12:26:19Z", "date_only": false, "value": "2023-09-14T12:26:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/timcore_hacking/2786", "record": "CVE-2022-0811", "field": "creation_timestamp", "uuid": "b6c50649-66d2-4510-9987-c0b4c45a7130", "content": "#hackthebox\n#htb\n#hacking\n\nHackTheBox - Pikatwoo\n\n00:00 - Introduction\n01:00 - Start of nmap\n03:15 - Identifying all the technologies used in the box\n10:45 - Looking at OpenStack Keystone Authentication and discovering CVE-2021-38155\n12:15 - Pulling up API DOCS to see how to login to Keystone, then testing lockout\n14:00 - Taking the Burpsuite Request, sending it to FFUF and using a trick to try each password multiple times\n25:30 - Attempting to access Swift as a vendor to bypass auth, using GoBuster and discovering an Android directory with Pokatmon app in it\n35:10 - Start of analyzing the Pokatmon App, examining DNS, setting up a MITM with Burpsuite and Socat\n40:15 - Using Frida to disable TLS Certificate Pinning on Flutter\n45:20 - Discovering the App Signs every request, grabbing the certificate out of the app, and signing our own request\n49:20 - Performing an SQL Injection, getting an email address then looking for vulnerabilities in Forgot Password on the main website\n58:48 - Discovering CVE-2021-43557 in APISIX, which gives us an idea to URLEncode Paths to bypass blacklists and gaining access to the /private/ directory which has a /forgot-password we can use to reset Roger's password\n1:04:45 - Logging into the docs, gaining access to the API and finding an LFI\n1:09:45 - Looking into CVE-2021-35368, which is a ModSecurity Bypass that allows us to abuse the LFI\n1:18:10 - Using NGINX's temporary files with our PHP LFI to gain code execution\n1:27:55 - Shell returned on Pokatdex-API, exporting Kubernetes secrets\n1:34:20 - Discovering an APISIX admin key and exploiting this service by creating a route that executes code\n1:59:20 - Shell returned on the APISIX box, discovering credentials we can SSH with\n2:11:10 - Explioting the CRI-O with Kubernetes to set a kernel param to execute a script when a core dump is created (CVE-2022-0811)\n\n\nhttps://www.youtube.com/watch?v=gRj9Uz8_EOY", "url": "https://t.me/timcore_hacking/2786", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-09-14T12:26:19Z", "date_only": false, "value": "2023-09-14T12:26:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/timcore_hacking/2786", "record": "CVE-2022-0811", "field": "creation_timestamp", "uuid": "55371397-db32-48ca-a25c-42b330886a76", "content": "#hackthebox\n#htb\n#hacking\n\nHackTheBox - Pikatwoo\n\n00:00 - Introduction\n01:00 - Start of nmap\n03:15 - Identifying all the technologies used in the box\n10:45 - Looking at OpenStack Keystone Authentication and discovering CVE-2021-38155\n12:15 - Pulling up API DOCS to see how to login to Keystone, then testing lockout\n14:00 - Taking the Burpsuite Request, sending it to FFUF and using a trick to try each password multiple times\n25:30 - Attempting to access Swift as a vendor to bypass auth, using GoBuster and discovering an Android directory with Pokatmon app in it\n35:10 - Start of analyzing the Pokatmon App, examining DNS, setting up a MITM with Burpsuite and Socat\n40:15 - Using Frida to disable TLS Certificate Pinning on Flutter\n45:20 - Discovering the App Signs every request, grabbing the certificate out of the app, and signing our own request\n49:20 - Performing an SQL Injection, getting an email address then looking for vulnerabilities in Forgot Password on the main website\n58:48 - Discovering CVE-2021-43557 in APISIX, which gives us an idea to URLEncode Paths to bypass blacklists and gaining access to the /private/ directory which has a /forgot-password we can use to reset Roger's password\n1:04:45 - Logging into the docs, gaining access to the API and finding an LFI\n1:09:45 - Looking into CVE-2021-35368, which is a ModSecurity Bypass that allows us to abuse the LFI\n1:18:10 - Using NGINX's temporary files with our PHP LFI to gain code execution\n1:27:55 - Shell returned on Pokatdex-API, exporting Kubernetes secrets\n1:34:20 - Discovering an APISIX admin key and exploiting this service by creating a route that executes code\n1:59:20 - Shell returned on the APISIX box, discovering credentials we can SSH with\n2:11:10 - Explioting the CRI-O with Kubernetes to set a kernel param to execute a script when a core dump is created (CVE-2022-0811)\n\n\nhttps://www.youtube.com/watch?v=gRj9Uz8_EOY", "url": "https://t.me/timcore_hacking/2786"}, {"timestamp": "2023-09-24T15:02:15Z", "date_only": false, "value": "2023-09-24T15:02:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/5621", "record": "CVE-2022-0811", "field": "creation_timestamp", "uuid": "22b05b17-2d94-4914-83d6-113b8dea4b15", "content": "#tools\n#Cloud_Security\ncr8escape - Vulnerability in CRI-O Container Engine (CVE-2022-0811)\nhttps://www.crowdstrike.com/blog/cr8escape-new-vulnerability-discovered-in-cri-o-container-engine-cve-2022-0811", "url": "https://t.me/CyberSecurityTechnologies/5621", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-12-13T01:19:11.283Z", "date_only": false, "value": "2023-12-13T01:19:11.283688Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-0811", "record": "GSD-2022-0811", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-05-17T05:11:00Z", "date_only": false, "value": "2024-05-17T05:11:00Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2024-UR07986", "record": "CLEANSTART-2024-UR07986", "field": "modified", "linked_record": true}, {"timestamp": "2024-08-02T23:40:04.258Z", "date_only": false, "value": "2024-08-02T23:40:04.258Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-0811", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-02T23:40:04.258Z", "date_only": false, "value": "2024-08-02T23:40:04.258Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-0811", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-22T18:38:53Z", "date_only": false, "value": "2024-11-22T18:38:53+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022_0810", "record": "RHSA-2022_0810", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2024-11-22T18:38:53Z", "date_only": false, "value": "2024-11-22T18:38:53+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2022_0810", "record": "RHSA-2022_0810", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-11-22T18:38:53Z", "date_only": false, "value": "2024-11-22T18:38:53+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2022_0810", "record": "RHSA-2022_0810", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2024-11-22T18:39:01Z", "date_only": false, "value": "2024-11-22T18:39:01+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022_0860", "record": "RHSA-2022_0860", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2024-11-22T18:39:01Z", "date_only": false, "value": "2024-11-22T18:39:01+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2022_0860", "record": "RHSA-2022_0860", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-11-22T18:39:01Z", "date_only": false, "value": "2024-11-22T18:39:01+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2022_0860", "record": "RHSA-2022_0860", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2024-11-22T18:39:08Z", "date_only": false, "value": "2024-11-22T18:39:08+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022_0870", "record": "RHSA-2022_0870", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2024-11-22T18:39:08Z", "date_only": false, "value": "2024-11-22T18:39:08+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2022_0870", "record": "RHSA-2022_0870", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-11-22T18:39:08Z", "date_only": false, "value": "2024-11-22T18:39:08+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2022_0870", "record": "RHSA-2022_0870", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2024-11-22T18:39:22Z", "date_only": false, "value": "2024-11-22T18:39:22+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022_0866", "record": "RHSA-2022_0866", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2024-11-22T18:39:22Z", "date_only": false, "value": "2024-11-22T18:39:22+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2022_0866", "record": "RHSA-2022_0866", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-11-22T18:39:22Z", "date_only": false, "value": "2024-11-22T18:39:22+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2022_0866", "record": "RHSA-2022_0866", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2024-11-22T18:44:22Z", "date_only": false, "value": "2024-11-22T18:44:22+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022_0871", "record": "RHSA-2022_0871", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2024-11-22T18:44:22Z", "date_only": false, "value": "2024-11-22T18:44:22+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2022_0871", "record": "RHSA-2022_0871", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-11-22T18:44:22Z", "date_only": false, "value": "2024-11-22T18:44:22+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2022_0871", "record": "RHSA-2022_0871", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2025-09-03T21:19:43Z", "date_only": false, "value": "2025-09-03T21:19:43.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-0811", "record": "MSRC_CVE-2022-0811", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2025-09-03T21:19:43Z", "date_only": false, "value": "2025-09-03T21:19:43.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-0811", "record": "MSRC_CVE-2022-0811", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-11-21T18:29:09Z", "date_only": false, "value": "2025-11-21T18:29:09+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0810", "record": "RHSA-2022:0810", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2025-11-21T18:29:09Z", "date_only": false, "value": "2025-11-21T18:29:09+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2022:0810", "record": "RHSA-2022:0810", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-11-21T18:29:09Z", "date_only": false, "value": "2025-11-21T18:29:09+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2022:0810", "record": "RHSA-2022:0810", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2025-11-21T18:29:14Z", "date_only": false, "value": "2025-11-21T18:29:14+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0860", "record": "RHSA-2022:0860", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2025-11-21T18:29:14Z", "date_only": false, "value": "2025-11-21T18:29:14+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0866", "record": "RHSA-2022:0866", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2025-11-21T18:29:14Z", "date_only": false, "value": "2025-11-21T18:29:14+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0870", "record": "RHSA-2022:0870", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2025-11-21T18:29:14Z", "date_only": false, "value": "2025-11-21T18:29:14+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2022:0860", "record": "RHSA-2022:0860", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-11-21T18:29:14Z", "date_only": false, "value": "2025-11-21T18:29:14+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2022:0866", "record": "RHSA-2022:0866", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-11-21T18:29:14Z", "date_only": false, "value": "2025-11-21T18:29:14+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2022:0870", "record": "RHSA-2022:0870", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-11-21T18:29:14Z", "date_only": false, "value": "2025-11-21T18:29:14+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2022:0860", "record": "RHSA-2022:0860", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2025-11-21T18:29:14Z", "date_only": false, "value": "2025-11-21T18:29:14+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2022:0866", "record": "RHSA-2022:0866", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2025-11-21T18:29:14Z", "date_only": false, "value": "2025-11-21T18:29:14+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2022:0870", "record": "RHSA-2022:0870", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-02-18T01:48:53Z", "date_only": false, "value": "2026-02-18T01:48:53.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-0811", "record": "MSRC_CVE-2022-0811", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-02-18T01:48:53Z", "date_only": false, "value": "2026-02-18T01:48:53.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-0811", "record": "MSRC_CVE-2022-0811", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-02-18T14:00:10.576Z", "date_only": false, "value": "2026-02-18T14:00:10.576Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-0811", "record": "MSRC_CVE-2022-0811", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-03-21T04:24:39Z", "date_only": false, "value": "2026-03-21T04:24:39+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0871", "record": "RHSA-2022:0871", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-03-21T04:24:39Z", "date_only": false, "value": "2026-03-21T04:24:39+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2022:0871", "record": "RHSA-2022:0871", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-03-21T04:24:39Z", "date_only": false, "value": "2026-03-21T04:24:39+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2022:0871", "record": "RHSA-2022:0871", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-06-17T04:21:17.997Z", "date_only": false, "value": "2026-06-17T04:21:17.997", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-0811", "record": "FKIE_CVE-2022-0811", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-29T12:02:44.133Z", "date_only": false, "value": "2026-07-29T12:02:44.133540Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2218", "record": "CVE-2022-0811", "field": "creation_timestamp", "uuid": "ed238632-926b-4ab7-81bb-562557ebf562", "content": "Mitigating CVE-2022-0811: Arbitrary code execution affecting CRI-O https://sysdig.com/blog/cve-2022-0811-cri-o/", "url": "https://t.me/reverseame/2218"}, {"timestamp": "2026-08-03T01:04:23.724Z", "date_only": false, "value": "2026-08-03T01:04:23.724413Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/2218", "record": "CVE-2022-0811", "field": "creation_timestamp", "uuid": "e7a0aba2-c865-4d76-a65f-e7a901842745", "content": "Mitigating CVE-2022-0811: Arbitrary code execution affecting CRI-O https://sysdig.com/blog/cve-2022-0811-cri-o/", "url": "https://t.me/reverseame/2218", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-29T18:00:04.801Z", "date_only": false, "value": "2026-08-29T18:00:04.801480Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Kubesploit/236", "record": "CVE-2022-0811", "field": "creation_timestamp", "uuid": "5848abf3-9e6a-4d4a-878f-8d49b9315d6c", "content": "A vulnerability in CRI-O could allow for attackers who are able to create pods in a Kubernetes or OpenShift cluster to break out to the underlying cluster node, effectively escalating their privileges.\n\nMore: https://blog.aquasec.com/cve-2022-0811-cri-o-vulnerability", "url": "https://t.me/Kubesploit/236", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-01T17:00:31.089Z", "date_only": false, "value": "2026-09-01T17:00:31.089896Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/5521", "record": "CVE-2022-0811", "field": "creation_timestamp", "uuid": "a9acc54f-8959-45a8-8218-b0cf63ac3b1b", "content": "A new vulnerability (CVE-2022-0811) in the CRI-O engine, dubbed \u201ccr8escape,\u201d could allow attackers to escape Kubernetes containers and gain root access. \n\nRead details: https://thehackernews.com/2022/03/new-vulnerability-in-cri-o-engine-lets.html", "url": "https://t.me/cissp/5521"}, {"timestamp": "2026-10-31T14:15:36.880Z", "date_only": false, "value": "2026-10-31T14:15:36.880111Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2024-UR07986", "record": "CLEANSTART-2024-UR07986", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}], "metrics": {"as_of": "2026-11-11T05:35:50.579Z", "anchors": {"origin": {"timestamp": "2022-03-01T00:00:00Z", "date_only": false, "value": "2022-03-01T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:0810", "record": "RHSA-2022:0810", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "discovery": {"timestamp": "2022-03-01T00:00:00Z", "date_only": false, "value": "2022-03-01T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:0810", "record": "RHSA-2022:0810", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2022-03-02T00:00:00Z", "date_only": false, "value": "2022-03-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-0811", "record": "MSRC_CVE-2022-0811", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": {"timestamp": "2022-03-17T08:46:54Z", "date_only": false, "value": "2022-03-17T08:46:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/9049", "record": "CVE-2022-0811", "field": "creation_timestamp", "uuid": "d147191a-58e6-49fd-9686-82d1451768dc", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Zero-Day: CrowdStrike\u2019s Cloud Threat Research team discovered a new vulnerability (CVE-2022-0811) in CRI-O (a container runtime engine underpinning Kubernetes). Dubbed \u201ccr8escape,\u201d when invoked, an attacker could escape from a Kubernetes container and gain root access to the host and be able to move anywhere in the cluster. Invocation of CVE-2022-0811 can allow an attacker to perform a variety of actions on objectives, including execution of malware, exfiltration of data and lateral movement across pods.\n\nInvocation of CVE-2022-0811 can allow an attacker to perform a variety of actions on objectives, including execution of malware, exfiltration of data, and lateral movement across pods.\n\nhttps://www.crowdstrike.com/blog/cr8escape-new-vulnerability-discovered-in-cri-o-container-engine-cve-2022-0811/\n\nhttps://thehackernews.com/2022/03/new-vulnerability-in-cri-o-engine-lets.html", "url": "https://t.me/cKure/9049", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2023-03-27T13:14:41Z", "date_only": false, "value": "2023-03-27T13:14:41.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xakep_ru/13806", "record": "CVE-2022-0811", "field": "creation_timestamp", "uuid": "8cf5a701-c83b-486b-b999-6c3d9ce6c60c", "content": "HTB Vessel. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435 Kubernetes #\u0441\u0442\u0430\u0442\u044c\u0438 #\u043f\u043e\u0434\u043f\u0438\u0441\u0447\u0438\u043a\u0430\u043c\n\n\u0412 \u044d\u0442\u043e\u043c \u0440\u0430\u0439\u0442\u0430\u043f\u0435 \u044f \u043f\u043e\u043a\u0430\u0436\u0443, \u043a\u0430\u043a \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-0811, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432\u044b\u0445\u043e\u0434\u0438\u0442\u044c \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435 Kubernetes. \u041f\u043e \u0434\u043e\u0440\u043e\u0433\u0435 \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0438\u043c, \u043a\u0430\u043a \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f Git, \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u0438 \u043f\u043e\u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0438\u043c \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 Open Web Analytics, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0445\u043e\u0441\u0442\u0443. \u0415\u0449\u0435 \u0440\u0430\u0437\u0431\u0435\u0440\u0435\u043c\u0441\u044f \u0441 \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u0443\u0435\u043c PDF-\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442.\n\nhttps://xakep.ru/2023/03/27/htb-vessel/", "url": "https://t.me/xakep_ru/13806", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "patch": {"timestamp": "2022-03-15T23:18:22Z", "date_only": false, "value": "2022-03-15T23:18:22+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2022:0810", "record": "RHSA-2022:0810", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 33830081.0, "hours": 9397.244722222222, "days": 391.55186342592594, "min_seconds": 33743681.0, "max_seconds": 33830081.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-03-01T00:00:00Z", "date_only": false, "value": "2022-03-01T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:0810", "record": "RHSA-2022:0810", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2023-03-27T13:14:41Z", "date_only": false, "value": "2023-03-27T13:14:41.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xakep_ru/13806", "record": "CVE-2022-0811", "field": "creation_timestamp", "uuid": "8cf5a701-c83b-486b-b999-6c3d9ce6c60c", "content": "HTB Vessel. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435 Kubernetes #\u0441\u0442\u0430\u0442\u044c\u0438 #\u043f\u043e\u0434\u043f\u0438\u0441\u0447\u0438\u043a\u0430\u043c\n\n\u0412 \u044d\u0442\u043e\u043c \u0440\u0430\u0439\u0442\u0430\u043f\u0435 \u044f \u043f\u043e\u043a\u0430\u0436\u0443, \u043a\u0430\u043a \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-0811, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432\u044b\u0445\u043e\u0434\u0438\u0442\u044c \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435 Kubernetes. \u041f\u043e \u0434\u043e\u0440\u043e\u0433\u0435 \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0438\u043c, \u043a\u0430\u043a \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f Git, \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u0438 \u043f\u043e\u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0438\u043c \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 Open Web Analytics, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0445\u043e\u0441\u0442\u0443. \u0415\u0449\u0435 \u0440\u0430\u0437\u0431\u0435\u0440\u0435\u043c\u0441\u044f \u0441 \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u0443\u0435\u043c PDF-\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442.\n\nhttps://xakep.ru/2023/03/27/htb-vessel/", "url": "https://t.me/xakep_ru/13806", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit": {"available": true, "seconds": 33743681.0, "hours": 9373.244722222222, "days": 390.55186342592594, "min_seconds": 33657281.0, "max_seconds": 33743681.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-03-02T00:00:00Z", "date_only": false, "value": "2022-03-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-0811", "record": "MSRC_CVE-2022-0811", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2023-03-27T13:14:41Z", "date_only": false, "value": "2023-03-27T13:14:41.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xakep_ru/13806", "record": "CVE-2022-0811", "field": "creation_timestamp", "uuid": "8cf5a701-c83b-486b-b999-6c3d9ce6c60c", "content": "HTB Vessel. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435 Kubernetes #\u0441\u0442\u0430\u0442\u044c\u0438 #\u043f\u043e\u0434\u043f\u0438\u0441\u0447\u0438\u043a\u0430\u043c\n\n\u0412 \u044d\u0442\u043e\u043c \u0440\u0430\u0439\u0442\u0430\u043f\u0435 \u044f \u043f\u043e\u043a\u0430\u0436\u0443, \u043a\u0430\u043a \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-0811, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432\u044b\u0445\u043e\u0434\u0438\u0442\u044c \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435 Kubernetes. \u041f\u043e \u0434\u043e\u0440\u043e\u0433\u0435 \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0438\u043c, \u043a\u0430\u043a \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f Git, \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u0438 \u043f\u043e\u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0438\u043c \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 Open Web Analytics, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0445\u043e\u0441\u0442\u0443. \u0415\u0449\u0435 \u0440\u0430\u0437\u0431\u0435\u0440\u0435\u043c\u0441\u044f \u0441 \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u0443\u0435\u043c PDF-\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442.\n\nhttps://xakep.ru/2023/03/27/htb-vessel/", "url": "https://t.me/xakep_ru/13806", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 1327614.0, "hours": 368.7816666666667, "days": 15.365902777777778, "min_seconds": 1241214.0, "max_seconds": 1327614.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-03-02T00:00:00Z", "date_only": false, "value": "2022-03-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-0811", "record": "MSRC_CVE-2022-0811", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2022-03-17T08:46:54Z", "date_only": false, "value": "2022-03-17T08:46:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/9049", "record": "CVE-2022-0811", "field": "creation_timestamp", "uuid": "d147191a-58e6-49fd-9686-82d1451768dc", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Zero-Day: CrowdStrike\u2019s Cloud Threat Research team discovered a new vulnerability (CVE-2022-0811) in CRI-O (a container runtime engine underpinning Kubernetes). Dubbed \u201ccr8escape,\u201d when invoked, an attacker could escape from a Kubernetes container and gain root access to the host and be able to move anywhere in the cluster. Invocation of CVE-2022-0811 can allow an attacker to perform a variety of actions on objectives, including execution of malware, exfiltration of data and lateral movement across pods.\n\nInvocation of CVE-2022-0811 can allow an attacker to perform a variety of actions on objectives, including execution of malware, exfiltration of data, and lateral movement across pods.\n\nhttps://www.crowdstrike.com/blog/cr8escape-new-vulnerability-discovered-in-cri-o-container-engine-cve-2022-0811/\n\nhttps://thehackernews.com/2022/03/new-vulnerability-in-cri-o-engine-lets.html", "url": "https://t.me/cKure/9049", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": true, "seconds": 1293502.0, "hours": 359.30611111111114, "days": 14.971087962962963, "min_seconds": 1207102.0, "max_seconds": 1293502.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-03-01T00:00:00Z", "date_only": false, "value": "2022-03-01T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:0810", "record": "RHSA-2022:0810", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2022-03-15T23:18:22Z", "date_only": false, "value": "2022-03-15T23:18:22+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2022:0810", "record": "RHSA-2022:0810", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, "discovery_after_disclosure": false}, "disclosure_to_patch": {"available": true, "seconds": 1207102.0, "hours": 335.30611111111114, "days": 13.971087962962963, "min_seconds": 1120702.0, "max_seconds": 1207102.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-03-02T00:00:00Z", "date_only": false, "value": "2022-03-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-0811", "record": "MSRC_CVE-2022-0811", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2022-03-15T23:18:22Z", "date_only": false, "value": "2022-03-15T23:18:22+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2022:0810", "record": "RHSA-2022:0810", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "time_unpatched": {"available": true, "seconds": 1293502.0, "hours": 359.30611111111114, "days": 14.971087962962963, "min_seconds": 1207102.0, "max_seconds": 1293502.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-03-01T00:00:00Z", "date_only": false, "value": "2022-03-01T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:0810", "record": "RHSA-2022:0810", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2022-03-15T23:18:22Z", "date_only": false, "value": "2022-03-15T23:18:22+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2022:0810", "record": "RHSA-2022:0810", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "exploitation_to_patch": {"available": true, "seconds": -32536579.0, "hours": -9037.93861111111, "days": -376.58077546296295, "min_seconds": -32536579.0, "max_seconds": -32536579.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2023-03-27T13:14:41Z", "date_only": false, "value": "2023-03-27T13:14:41.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xakep_ru/13806", "record": "CVE-2022-0811", "field": "creation_timestamp", "uuid": "8cf5a701-c83b-486b-b999-6c3d9ce6c60c", "content": "HTB Vessel. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435 Kubernetes #\u0441\u0442\u0430\u0442\u044c\u0438 #\u043f\u043e\u0434\u043f\u0438\u0441\u0447\u0438\u043a\u0430\u043c\n\n\u0412 \u044d\u0442\u043e\u043c \u0440\u0430\u0439\u0442\u0430\u043f\u0435 \u044f \u043f\u043e\u043a\u0430\u0436\u0443, \u043a\u0430\u043a \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-0811, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432\u044b\u0445\u043e\u0434\u0438\u0442\u044c \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435 Kubernetes. \u041f\u043e \u0434\u043e\u0440\u043e\u0433\u0435 \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0438\u043c, \u043a\u0430\u043a \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f Git, \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u0438 \u043f\u043e\u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0438\u043c \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 Open Web Analytics, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0445\u043e\u0441\u0442\u0443. \u0415\u0449\u0435 \u0440\u0430\u0437\u0431\u0435\u0440\u0435\u043c\u0441\u044f \u0441 \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u0443\u0435\u043c PDF-\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442.\n\nhttps://xakep.ru/2023/03/27/htb-vessel/", "url": "https://t.me/xakep_ru/13806", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "end": {"timestamp": "2022-03-15T23:18:22Z", "date_only": false, "value": "2022-03-15T23:18:22+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2022:0810", "record": "RHSA-2022:0810", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "exploit_publication_to_patch": {"available": true, "seconds": -120512.0, "hours": -33.47555555555556, "days": -1.3948148148148147, "min_seconds": -120512.0, "max_seconds": -120512.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2022-03-17T08:46:54Z", "date_only": false, "value": "2022-03-17T08:46:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/9049", "record": "CVE-2022-0811", "field": "creation_timestamp", "uuid": "d147191a-58e6-49fd-9686-82d1451768dc", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Zero-Day: CrowdStrike\u2019s Cloud Threat Research team discovered a new vulnerability (CVE-2022-0811) in CRI-O (a container runtime engine underpinning Kubernetes). Dubbed \u201ccr8escape,\u201d when invoked, an attacker could escape from a Kubernetes container and gain root access to the host and be able to move anywhere in the cluster. Invocation of CVE-2022-0811 can allow an attacker to perform a variety of actions on objectives, including execution of malware, exfiltration of data and lateral movement across pods.\n\nInvocation of CVE-2022-0811 can allow an attacker to perform a variety of actions on objectives, including execution of malware, exfiltration of data, and lateral movement across pods.\n\nhttps://www.crowdstrike.com/blog/cr8escape-new-vulnerability-discovered-in-cri-o-container-engine-cve-2022-0811/\n\nhttps://thehackernews.com/2022/03/new-vulnerability-in-cri-o-engine-lets.html", "url": "https://t.me/cKure/9049", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2022-03-15T23:18:22Z", "date_only": false, "value": "2022-03-15T23:18:22+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2022:0810", "record": "RHSA-2022:0810", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}}}