{"vulnerability": "CVE-2022-0811", "sightings": [{"uuid": "d147191a-58e6-49fd-9686-82d1451768dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "published-proof-of-concept", "source": "https://t.me/cKure/9049", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Zero-Day: CrowdStrike\u2019s Cloud Threat Research team discovered a new vulnerability (CVE-2022-0811) in CRI-O (a container runtime engine underpinning Kubernetes). Dubbed \u201ccr8escape,\u201d when invoked, an attacker could escape from a Kubernetes container and gain root access to the host and be able to move anywhere in the cluster. Invocation of CVE-2022-0811 can allow an attacker to perform a variety of actions on objectives, including execution of malware, exfiltration of data and lateral movement across pods.\n\nInvocation of CVE-2022-0811 can allow an attacker to perform a variety of actions on objectives, including execution of malware, exfiltration of data, and lateral movement across pods.\n\nhttps://www.crowdstrike.com/blog/cr8escape-new-vulnerability-discovered-in-cri-o-container-engine-cve-2022-0811/\n\nhttps://thehackernews.com/2022/03/new-vulnerability-in-cri-o-engine-lets.html", "creation_timestamp": "2022-03-17T08:46:54.000000Z"}, {"uuid": "b2cdb276-726a-4c8f-af98-0fd40faf7d46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/1693", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aSimple webhook to block exploitation of CVE-2022-0811\nURL\uff1ahttps://github.com/spiarh/webhook-cve-2022-0811\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-03-21T09:29:43.000000Z"}, {"uuid": "e1426be2-1a6e-49e5-96d1-518fbe4b774e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "published-proof-of-concept", "source": "https://t.me/ggfcvj/3268", "content": "\u0623\u0628\u0644\u063a \u0641\u0631\u064a\u0642 CrowdStrike Cloud Threat Research \u0639\u0646 \u0648\u062c\u0648\u062f \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u062e\u0637\u064a\u0631\u0629 \u0641\u064a CRI-O Container Engine for Kubernetes \u0648\u0627\u0644\u062a\u064a \u064a\u0645\u0643\u0646 \u0627\u0633\u062a\u062e\u062f\u0627\u0645\u0647\u0627 \u0644\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u062d\u0627\u0648\u064a\u0629 \u0648\u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0648\u0635\u0648\u0644 \u0627\u0644\u062c\u0630\u0631 \u0625\u0644\u0649 \u0645\u0636\u064a\u0641.\n\nCRI-O \u0647\u0648 \u062a\u0637\u0628\u064a\u0642 \u064a\u0639\u062a\u0645\u062f \u0639\u0644\u0649 OCI (\u0645\u0628\u0627\u062f\u0631\u0629 \u0627\u0644\u062d\u0627\u0648\u064a\u0629 \u0627\u0644\u0645\u0641\u062a\u0648\u062d\u0629) \u0644\u0648\u0627\u062c\u0647\u0629 Kubernetes Container Runtime (CRI) \u0627\u0644\u062a\u064a \u062a\u0645\u062b\u0644 \u0648\u0642\u062a \u062a\u0634\u063a\u064a\u0644 \u062d\u0627\u0648\u064a\u0629 \u062e\u0641\u064a\u0641 \u0627\u0644\u0648\u0632\u0646 \u0644\u0640 Kubernetes \u0627\u0644\u0645\u0635\u0645\u0645\u0629 \u0644\u0644\u062a\u0643\u0627\u0645\u0644 \u0628\u064a\u0646 \u0623\u0648\u0642\u0627\u062a \u0627\u0644\u062a\u0634\u063a\u064a\u0644 \u0627\u0644\u0645\u062a\u0648\u0627\u0641\u0642\u0629 \u0645\u0639 OCI \u0648 kubelets.\n\n\u064a\u064f\u0637\u0644\u0642 \u0639\u0644\u0649 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0633\u0645 cr8escape \u0648\u062a\u0639\u0642\u0628\u0647\u0627 \u0643\u0640 CVE-2022-0811 \u060c \u0648\u0647\u064a \u0646\u0627\u062a\u062c\u0629 \u0639\u0646 \u0639\u062f\u0645 \u0648\u062c\u0648\u062f \u0627\u0644\u062a\u062d\u0642\u0642 \u0627\u0644\u0645\u0646\u0627\u0633\u0628 \u0645\u0646 \u0645\u0639\u0644\u0645\u0627\u062a kernel \u0627\u0644\u062a\u064a \u062a\u0645 \u062a\u0645\u0631\u064a\u0631\u0647\u0627 \u0625\u0644\u0649 \u0627\u0644\u0623\u062f\u0627\u0629 \u0627\u0644\u0645\u0633\u0627\u0639\u062f\u0629 pinns. \u0646\u0634\u0623\u062a \u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u0641\u064a \u0627\u0644\u0625\u0635\u062f\u0627\u0631 1.19 \u0645\u0646 CRI-O \u060c \u0639\u0646\u062f\u0645\u0627 \u062a\u0645\u062a \u0625\u0636\u0627\u0641\u0629 \u062f\u0639\u0645 sysctl \u0625\u0644\u0649 \u0645\u062d\u0631\u0643 \u0627\u0644\u062d\u0627\u0648\u064a\u0629 \u060c \u0648\u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0625\u0633\u0627\u0621\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062e\u064a\u0627\u0631 kernel.core_pattern \u0644\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u0627\u0644\u062d\u0627\u0648\u064a\u0629.\n\n\u062f\u0631\u062c\u0629 CVE \u0647\u064a 8.8 (\u0639\u0627\u0644\u064a\u0629) \u0648\u0627\u0644\u062a\u0623\u062b\u064a\u0631 \u0627\u0644\u0645\u062d\u062a\u0645\u0644 \u0648\u0627\u0633\u0639 \u0627\u0644\u0627\u0646\u062a\u0634\u0627\u0631 \u0644\u0623\u0646 \u0627\u0644\u0639\u062f\u064a\u062f \u0645\u0646 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0648\u0627\u0644\u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0623\u0633\u0627\u0633\u064a\u0629 \u062a\u0633\u062a\u062e\u062f\u0645 CRI-O \u0627\u0641\u062a\u0631\u0627\u0636\u064a\u064b\u0627.\n\n\u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u060c \u0628\u0641\u0636\u0644 cr8escape \u060c \u0628\u0627\u0644\u0625\u0636\u0627\u0641\u0629 \u0625\u0644\u0649 \u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0636\u0627\u0631\u0629 \u0648\u062a\u0633\u0644\u0644 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u060c \u0627\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u062d\u0627\u0648\u064a\u0629 Kubernetes \u060c \u0648\u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0648\u0635\u0648\u0644 \u0627\u0644\u062c\u0630\u0631 \u0625\u0644\u0649 \u0627\u0644\u0645\u0636\u064a\u0641 \u060c \u0648\u0627\u0644\u0642\u062f\u0631\u0629 \u0639\u0644\u0649 \u0627\u0644\u062a\u062d\u0631\u0643 \u0623\u0641\u0642\u064a\u064b\u0627 \u0641\u064a \u0627\u0644\u0645\u062c\u0645\u0648\u0639\u0629. \u064a\u062a\u0637\u0644\u0628 \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0625\u0630\u0646\u064b\u0627 \u0644\u0646\u0634\u0631 \u0627\u0644\u0648\u062d\u062f\u0629 \u0641\u064a \u0645\u062c\u0645\u0648\u0639\u0629 Kubernetes \u0627\u0644\u062a\u064a \u062a\u0633\u062a\u062e\u062f\u0645 \u0648\u0642\u062a \u062a\u0634\u063a\u064a\u0644 CRI-O.\n\n\u0642\u062f\u0645 CrowdStrke \u0623\u064a\u0636\u064b\u0627 POC \u064a\u0633\u062a\u062e\u062f\u0645 PodSpec \u0636\u0627\u0631\u064b\u0627 \u0644\u062a\u0639\u064a\u064a\u0646 \u0645\u0639\u0644\u0645\u0629 kernel kernel.core_pattern \u0639\u0646 \u0637\u0631\u064a\u0642 \u062a\u0634\u063a\u064a\u0644 \u062b\u0646\u0627\u0626\u064a \u0645\u0633\u062a\u0636\u0627\u0641 \u0641\u064a \u0648\u062d\u062f\u0629 \u0646\u0645\u0637\u064a\u0629 \u0623\u062e\u0631\u0649 \u0643\u062c\u0630\u0631.\n\n\u062a\u0645 \u0625\u0635\u0644\u0627\u062d \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0648\u064a\u0646\u0635\u062d \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u0648\u0646 \u0628\u0627\u0644\u062a\u0631\u0642\u064a\u0629 \u0625\u0644\u0649 \u0623\u062d\u062f\u062b \u0625\u0635\u062f\u0627\u0631 \u0645\u0646 CRI-O v1.23.2 \u0644\u0645\u0646\u0639 \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0627\u0644\u0645\u062d\u062a\u0645\u0644\u0629. \u0623\u0648 \u064a\u0645\u0643\u0646\u0643 \u0627\u0644\u0631\u062c\u0648\u0639 \u0625\u0644\u0649 \u0625\u0635\u062f\u0627\u0631 CRI-O 1.18 \u0623\u0648 \u0625\u0635\u062f\u0627\u0631 \u0623\u0642\u062f\u0645.\n\n@A_X_YG\n#\u0627\u0644\u0642\u0627\u0626\u062f_A_X_Y \n#The_Yemeni_ghost", "creation_timestamp": "2022-03-17T17:37:10.000000Z"}, {"uuid": "af8efbe5-b042-4661-b703-00b5b81c68b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "published-proof-of-concept", "source": "https://t.me/anwar1213xx/1819", "content": "\u0623\u0628\u0644\u063a \u0641\u0631\u064a\u0642 CrowdStrike Cloud Threat Research \u0639\u0646 \u0648\u062c\u0648\u062f \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u062e\u0637\u064a\u0631\u0629 \u0641\u064a CRI-O Container Engine for Kubernetes \u0648\u0627\u0644\u062a\u064a \u064a\u0645\u0643\u0646 \u0627\u0633\u062a\u062e\u062f\u0627\u0645\u0647\u0627 \u0644\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u062d\u0627\u0648\u064a\u0629 \u0648\u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0648\u0635\u0648\u0644 \u0627\u0644\u062c\u0630\u0631 \u0625\u0644\u0649 \u0645\u0636\u064a\u0641.\n\nCRI-O \u0647\u0648 \u062a\u0637\u0628\u064a\u0642 \u064a\u0639\u062a\u0645\u062f \u0639\u0644\u0649 OCI (\u0645\u0628\u0627\u062f\u0631\u0629 \u0627\u0644\u062d\u0627\u0648\u064a\u0629 \u0627\u0644\u0645\u0641\u062a\u0648\u062d\u0629) \u0644\u0648\u0627\u062c\u0647\u0629 Kubernetes Container Runtime (CRI) \u0627\u0644\u062a\u064a \u062a\u0645\u062b\u0644 \u0648\u0642\u062a \u062a\u0634\u063a\u064a\u0644 \u062d\u0627\u0648\u064a\u0629 \u062e\u0641\u064a\u0641 \u0627\u0644\u0648\u0632\u0646 \u0644\u0640 Kubernetes \u0627\u0644\u0645\u0635\u0645\u0645\u0629 \u0644\u0644\u062a\u0643\u0627\u0645\u0644 \u0628\u064a\u0646 \u0623\u0648\u0642\u0627\u062a \u0627\u0644\u062a\u0634\u063a\u064a\u0644 \u0627\u0644\u0645\u062a\u0648\u0627\u0641\u0642\u0629 \u0645\u0639 OCI \u0648 kubelets.\n\n\u064a\u064f\u0637\u0644\u0642 \u0639\u0644\u0649 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0633\u0645 cr8escape \u0648\u062a\u0639\u0642\u0628\u0647\u0627 \u0643\u0640 CVE-2022-0811 \u060c \u0648\u0647\u064a \u0646\u0627\u062a\u062c\u0629 \u0639\u0646 \u0639\u062f\u0645 \u0648\u062c\u0648\u062f \u0627\u0644\u062a\u062d\u0642\u0642 \u0627\u0644\u0645\u0646\u0627\u0633\u0628 \u0645\u0646 \u0645\u0639\u0644\u0645\u0627\u062a kernel \u0627\u0644\u062a\u064a \u062a\u0645 \u062a\u0645\u0631\u064a\u0631\u0647\u0627 \u0625\u0644\u0649 \u0627\u0644\u0623\u062f\u0627\u0629 \u0627\u0644\u0645\u0633\u0627\u0639\u062f\u0629 pinns. \u0646\u0634\u0623\u062a \u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u0641\u064a \u0627\u0644\u0625\u0635\u062f\u0627\u0631 1.19 \u0645\u0646 CRI-O \u060c \u0639\u0646\u062f\u0645\u0627 \u062a\u0645\u062a \u0625\u0636\u0627\u0641\u0629 \u062f\u0639\u0645 sysctl \u0625\u0644\u0649 \u0645\u062d\u0631\u0643 \u0627\u0644\u062d\u0627\u0648\u064a\u0629 \u060c \u0648\u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0625\u0633\u0627\u0621\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062e\u064a\u0627\u0631 kernel.core_pattern \u0644\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u0627\u0644\u062d\u0627\u0648\u064a\u0629.\n\n\u062f\u0631\u062c\u0629 CVE \u0647\u064a 8.8 (\u0639\u0627\u0644\u064a\u0629) \u0648\u0627\u0644\u062a\u0623\u062b\u064a\u0631 \u0627\u0644\u0645\u062d\u062a\u0645\u0644 \u0648\u0627\u0633\u0639 \u0627\u0644\u0627\u0646\u062a\u0634\u0627\u0631 \u0644\u0623\u0646 \u0627\u0644\u0639\u062f\u064a\u062f \u0645\u0646 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0648\u0627\u0644\u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0623\u0633\u0627\u0633\u064a\u0629 \u062a\u0633\u062a\u062e\u062f\u0645 CRI-O \u0627\u0641\u062a\u0631\u0627\u0636\u064a\u064b\u0627.\n\n\u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u060c \u0628\u0641\u0636\u0644 cr8escape \u060c \u0628\u0627\u0644\u0625\u0636\u0627\u0641\u0629 \u0625\u0644\u0649 \u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0636\u0627\u0631\u0629 \u0648\u062a\u0633\u0644\u0644 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u060c \u0627\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u062d\u0627\u0648\u064a\u0629 Kubernetes \u060c \u0648\u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0648\u0635\u0648\u0644 \u0627\u0644\u062c\u0630\u0631 \u0625\u0644\u0649 \u0627\u0644\u0645\u0636\u064a\u0641 \u060c \u0648\u0627\u0644\u0642\u062f\u0631\u0629 \u0639\u0644\u0649 \u0627\u0644\u062a\u062d\u0631\u0643 \u0623\u0641\u0642\u064a\u064b\u0627 \u0641\u064a \u0627\u0644\u0645\u062c\u0645\u0648\u0639\u0629. \u064a\u062a\u0637\u0644\u0628 \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0625\u0630\u0646\u064b\u0627 \u0644\u0646\u0634\u0631 \u0627\u0644\u0648\u062d\u062f\u0629 \u0641\u064a \u0645\u062c\u0645\u0648\u0639\u0629 Kubernetes \u0627\u0644\u062a\u064a \u062a\u0633\u062a\u062e\u062f\u0645 \u0648\u0642\u062a \u062a\u0634\u063a\u064a\u0644 CRI-O.\n\n\u0642\u062f\u0645 CrowdStrke \u0623\u064a\u0636\u064b\u0627 POC \u064a\u0633\u062a\u062e\u062f\u0645 PodSpec \u0636\u0627\u0631\u064b\u0627 \u0644\u062a\u0639\u064a\u064a\u0646 \u0645\u0639\u0644\u0645\u0629 kernel kernel.core_pattern \u0639\u0646 \u0637\u0631\u064a\u0642 \u062a\u0634\u063a\u064a\u0644 \u062b\u0646\u0627\u0626\u064a \u0645\u0633\u062a\u0636\u0627\u0641 \u0641\u064a \u0648\u062d\u062f\u0629 \u0646\u0645\u0637\u064a\u0629 \u0623\u062e\u0631\u0649 \u0643\u062c\u0630\u0631.\n\n\u062a\u0645 \u0625\u0635\u0644\u0627\u062d \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0648\u064a\u0646\u0635\u062d \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u0648\u0646 \u0628\u0627\u0644\u062a\u0631\u0642\u064a\u0629 \u0625\u0644\u0649 \u0623\u062d\u062f\u062b \u0625\u0635\u062f\u0627\u0631 \u0645\u0646 CRI-O v1.23.2 \u0644\u0645\u0646\u0639 \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0627\u0644\u0645\u062d\u062a\u0645\u0644\u0629. \u0623\u0648 \u064a\u0645\u0643\u0646\u0643 \u0627\u0644\u0631\u062c\u0648\u0639 \u0625\u0644\u0649 \u0625\u0635\u062f\u0627\u0631 CRI-O 1.18 \u0623\u0648 \u0625\u0635\u062f\u0627\u0631 \u0623\u0642\u062f\u0645.\n\n@A_X_YG\n#\u0627\u0644\u0642\u0627\u0626\u062f_A_X_Y \n#The_Yemeni_ghost", "creation_timestamp": "2022-03-17T18:37:12.000000Z"}, {"uuid": "ced437a4-5f4f-4693-9348-256e37fe24ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "published-proof-of-concept", "source": "https://t.me/piratesofyemen/614", "content": "\u0623\u0628\u0644\u063a \u0641\u0631\u064a\u0642 CrowdStrike Cloud Threat Research \u0639\u0646 \u0648\u062c\u0648\u062f \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u062e\u0637\u064a\u0631\u0629 \u0641\u064a CRI-O Container Engine for Kubernetes \u0648\u0627\u0644\u062a\u064a \u064a\u0645\u0643\u0646 \u0627\u0633\u062a\u062e\u062f\u0627\u0645\u0647\u0627 \u0644\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u062d\u0627\u0648\u064a\u0629 \u0648\u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0648\u0635\u0648\u0644 \u0627\u0644\u062c\u0630\u0631 \u0625\u0644\u0649 \u0645\u0636\u064a\u0641.\n\nCRI-O \u0647\u0648 \u062a\u0637\u0628\u064a\u0642 \u064a\u0639\u062a\u0645\u062f \u0639\u0644\u0649 OCI (\u0645\u0628\u0627\u062f\u0631\u0629 \u0627\u0644\u062d\u0627\u0648\u064a\u0629 \u0627\u0644\u0645\u0641\u062a\u0648\u062d\u0629) \u0644\u0648\u0627\u062c\u0647\u0629 Kubernetes Container Runtime (CRI) \u0627\u0644\u062a\u064a \u062a\u0645\u062b\u0644 \u0648\u0642\u062a \u062a\u0634\u063a\u064a\u0644 \u062d\u0627\u0648\u064a\u0629 \u062e\u0641\u064a\u0641 \u0627\u0644\u0648\u0632\u0646 \u0644\u0640 Kubernetes \u0627\u0644\u0645\u0635\u0645\u0645\u0629 \u0644\u0644\u062a\u0643\u0627\u0645\u0644 \u0628\u064a\u0646 \u0623\u0648\u0642\u0627\u062a \u0627\u0644\u062a\u0634\u063a\u064a\u0644 \u0627\u0644\u0645\u062a\u0648\u0627\u0641\u0642\u0629 \u0645\u0639 OCI \u0648 kubelets.\n\n\u064a\u064f\u0637\u0644\u0642 \u0639\u0644\u0649 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0633\u0645 cr8escape \u0648\u062a\u0639\u0642\u0628\u0647\u0627 \u0643\u0640 CVE-2022-0811 \u060c \u0648\u0647\u064a \u0646\u0627\u062a\u062c\u0629 \u0639\u0646 \u0639\u062f\u0645 \u0648\u062c\u0648\u062f \u0627\u0644\u062a\u062d\u0642\u0642 \u0627\u0644\u0645\u0646\u0627\u0633\u0628 \u0645\u0646 \u0645\u0639\u0644\u0645\u0627\u062a kernel \u0627\u0644\u062a\u064a \u062a\u0645 \u062a\u0645\u0631\u064a\u0631\u0647\u0627 \u0625\u0644\u0649 \u0627\u0644\u0623\u062f\u0627\u0629 \u0627\u0644\u0645\u0633\u0627\u0639\u062f\u0629 pinns. \u0646\u0634\u0623\u062a \u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u0641\u064a \u0627\u0644\u0625\u0635\u062f\u0627\u0631 1.19 \u0645\u0646 CRI-O \u060c \u0639\u0646\u062f\u0645\u0627 \u062a\u0645\u062a \u0625\u0636\u0627\u0641\u0629 \u062f\u0639\u0645 sysctl \u0625\u0644\u0649 \u0645\u062d\u0631\u0643 \u0627\u0644\u062d\u0627\u0648\u064a\u0629 \u060c \u0648\u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0625\u0633\u0627\u0621\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062e\u064a\u0627\u0631 kernel.core_pattern \u0644\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u0627\u0644\u062d\u0627\u0648\u064a\u0629.\n\n\u062f\u0631\u062c\u0629 CVE \u0647\u064a 8.8 (\u0639\u0627\u0644\u064a\u0629) \u0648\u0627\u0644\u062a\u0623\u062b\u064a\u0631 \u0627\u0644\u0645\u062d\u062a\u0645\u0644 \u0648\u0627\u0633\u0639 \u0627\u0644\u0627\u0646\u062a\u0634\u0627\u0631 \u0644\u0623\u0646 \u0627\u0644\u0639\u062f\u064a\u062f \u0645\u0646 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0648\u0627\u0644\u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0623\u0633\u0627\u0633\u064a\u0629 \u062a\u0633\u062a\u062e\u062f\u0645 CRI-O \u0627\u0641\u062a\u0631\u0627\u0636\u064a\u064b\u0627.\n\n\u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u060c \u0628\u0641\u0636\u0644 cr8escape \u060c \u0628\u0627\u0644\u0625\u0636\u0627\u0641\u0629 \u0625\u0644\u0649 \u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0636\u0627\u0631\u0629 \u0648\u062a\u0633\u0644\u0644 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u060c \u0627\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u062d\u0627\u0648\u064a\u0629 Kubernetes \u060c \u0648\u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0648\u0635\u0648\u0644 \u0627\u0644\u062c\u0630\u0631 \u0625\u0644\u0649 \u0627\u0644\u0645\u0636\u064a\u0641 \u060c \u0648\u0627\u0644\u0642\u062f\u0631\u0629 \u0639\u0644\u0649 \u0627\u0644\u062a\u062d\u0631\u0643 \u0623\u0641\u0642\u064a\u064b\u0627 \u0641\u064a \u0627\u0644\u0645\u062c\u0645\u0648\u0639\u0629. \u064a\u062a\u0637\u0644\u0628 \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0625\u0630\u0646\u064b\u0627 \u0644\u0646\u0634\u0631 \u0627\u0644\u0648\u062d\u062f\u0629 \u0641\u064a \u0645\u062c\u0645\u0648\u0639\u0629 Kubernetes \u0627\u0644\u062a\u064a \u062a\u0633\u062a\u062e\u062f\u0645 \u0648\u0642\u062a \u062a\u0634\u063a\u064a\u0644 CRI-O.\n\n\u0642\u062f\u0645 CrowdStrke \u0623\u064a\u0636\u064b\u0627 POC \u064a\u0633\u062a\u062e\u062f\u0645 PodSpec \u0636\u0627\u0631\u064b\u0627 \u0644\u062a\u0639\u064a\u064a\u0646 \u0645\u0639\u0644\u0645\u0629 kernel kernel.core_pattern \u0639\u0646 \u0637\u0631\u064a\u0642 \u062a\u0634\u063a\u064a\u0644 \u062b\u0646\u0627\u0626\u064a \u0645\u0633\u062a\u0636\u0627\u0641 \u0641\u064a \u0648\u062d\u062f\u0629 \u0646\u0645\u0637\u064a\u0629 \u0623\u062e\u0631\u0649 \u0643\u062c\u0630\u0631.\n\n\u062a\u0645 \u0625\u0635\u0644\u0627\u062d \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0648\u064a\u0646\u0635\u062d \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u0648\u0646 \u0628\u0627\u0644\u062a\u0631\u0642\u064a\u0629 \u0625\u0644\u0649 \u0623\u062d\u062f\u062b \u0625\u0635\u062f\u0627\u0631 \u0645\u0646 CRI-O v1.23.2 \u0644\u0645\u0646\u0639 \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0627\u0644\u0645\u062d\u062a\u0645\u0644\u0629. \u0623\u0648 \u064a\u0645\u0643\u0646\u0643 \u0627\u0644\u0631\u062c\u0648\u0639 \u0625\u0644\u0649 \u0625\u0635\u062f\u0627\u0631 CRI-O 1.18 \u0623\u0648 \u0625\u0635\u062f\u0627\u0631 \u0623\u0642\u062f\u0645.\n\n@A_X_YG\n#\u0627\u0644\u0642\u0627\u0626\u062f_A_X_Y \n#The_Yemeni_ghost", "creation_timestamp": "2022-03-17T18:36:58.000000Z"}, {"uuid": "21d970ff-b2b5-4c57-b3d4-b516f4993a67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "published-proof-of-concept", "source": "https://t.me/piratesofyemen1213/447", "content": "\u0623\u0628\u0644\u063a \u0641\u0631\u064a\u0642 CrowdStrike Cloud Threat Research \u0639\u0646 \u0648\u062c\u0648\u062f \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u062e\u0637\u064a\u0631\u0629 \u0641\u064a CRI-O Container Engine for Kubernetes \u0648\u0627\u0644\u062a\u064a \u064a\u0645\u0643\u0646 \u0627\u0633\u062a\u062e\u062f\u0627\u0645\u0647\u0627 \u0644\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u062d\u0627\u0648\u064a\u0629 \u0648\u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0648\u0635\u0648\u0644 \u0627\u0644\u062c\u0630\u0631 \u0625\u0644\u0649 \u0645\u0636\u064a\u0641.\n\nCRI-O \u0647\u0648 \u062a\u0637\u0628\u064a\u0642 \u064a\u0639\u062a\u0645\u062f \u0639\u0644\u0649 OCI (\u0645\u0628\u0627\u062f\u0631\u0629 \u0627\u0644\u062d\u0627\u0648\u064a\u0629 \u0627\u0644\u0645\u0641\u062a\u0648\u062d\u0629) \u0644\u0648\u0627\u062c\u0647\u0629 Kubernetes Container Runtime (CRI) \u0627\u0644\u062a\u064a \u062a\u0645\u062b\u0644 \u0648\u0642\u062a \u062a\u0634\u063a\u064a\u0644 \u062d\u0627\u0648\u064a\u0629 \u062e\u0641\u064a\u0641 \u0627\u0644\u0648\u0632\u0646 \u0644\u0640 Kubernetes \u0627\u0644\u0645\u0635\u0645\u0645\u0629 \u0644\u0644\u062a\u0643\u0627\u0645\u0644 \u0628\u064a\u0646 \u0623\u0648\u0642\u0627\u062a \u0627\u0644\u062a\u0634\u063a\u064a\u0644 \u0627\u0644\u0645\u062a\u0648\u0627\u0641\u0642\u0629 \u0645\u0639 OCI \u0648 kubelets.\n\n\u064a\u064f\u0637\u0644\u0642 \u0639\u0644\u0649 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0633\u0645 cr8escape \u0648\u062a\u0639\u0642\u0628\u0647\u0627 \u0643\u0640 CVE-2022-0811 \u060c \u0648\u0647\u064a \u0646\u0627\u062a\u062c\u0629 \u0639\u0646 \u0639\u062f\u0645 \u0648\u062c\u0648\u062f \u0627\u0644\u062a\u062d\u0642\u0642 \u0627\u0644\u0645\u0646\u0627\u0633\u0628 \u0645\u0646 \u0645\u0639\u0644\u0645\u0627\u062a kernel \u0627\u0644\u062a\u064a \u062a\u0645 \u062a\u0645\u0631\u064a\u0631\u0647\u0627 \u0625\u0644\u0649 \u0627\u0644\u0623\u062f\u0627\u0629 \u0627\u0644\u0645\u0633\u0627\u0639\u062f\u0629 pinns. \u0646\u0634\u0623\u062a \u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u0641\u064a \u0627\u0644\u0625\u0635\u062f\u0627\u0631 1.19 \u0645\u0646 CRI-O \u060c \u0639\u0646\u062f\u0645\u0627 \u062a\u0645\u062a \u0625\u0636\u0627\u0641\u0629 \u062f\u0639\u0645 sysctl \u0625\u0644\u0649 \u0645\u062d\u0631\u0643 \u0627\u0644\u062d\u0627\u0648\u064a\u0629 \u060c \u0648\u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0625\u0633\u0627\u0621\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062e\u064a\u0627\u0631 kernel.core_pattern \u0644\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u0627\u0644\u062d\u0627\u0648\u064a\u0629.\n\n\u062f\u0631\u062c\u0629 CVE \u0647\u064a 8.8 (\u0639\u0627\u0644\u064a\u0629) \u0648\u0627\u0644\u062a\u0623\u062b\u064a\u0631 \u0627\u0644\u0645\u062d\u062a\u0645\u0644 \u0648\u0627\u0633\u0639 \u0627\u0644\u0627\u0646\u062a\u0634\u0627\u0631 \u0644\u0623\u0646 \u0627\u0644\u0639\u062f\u064a\u062f \u0645\u0646 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0648\u0627\u0644\u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0623\u0633\u0627\u0633\u064a\u0629 \u062a\u0633\u062a\u062e\u062f\u0645 CRI-O \u0627\u0641\u062a\u0631\u0627\u0636\u064a\u064b\u0627.\n\n\u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u060c \u0628\u0641\u0636\u0644 cr8escape \u060c \u0628\u0627\u0644\u0625\u0636\u0627\u0641\u0629 \u0625\u0644\u0649 \u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0636\u0627\u0631\u0629 \u0648\u062a\u0633\u0644\u0644 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u060c \u0627\u0644\u062e\u0631\u0648\u062c \u0645\u0646 \u062d\u0627\u0648\u064a\u0629 Kubernetes \u060c \u0648\u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0648\u0635\u0648\u0644 \u0627\u0644\u062c\u0630\u0631 \u0625\u0644\u0649 \u0627\u0644\u0645\u0636\u064a\u0641 \u060c \u0648\u0627\u0644\u0642\u062f\u0631\u0629 \u0639\u0644\u0649 \u0627\u0644\u062a\u062d\u0631\u0643 \u0623\u0641\u0642\u064a\u064b\u0627 \u0641\u064a \u0627\u0644\u0645\u062c\u0645\u0648\u0639\u0629. \u064a\u062a\u0637\u0644\u0628 \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0625\u0630\u0646\u064b\u0627 \u0644\u0646\u0634\u0631 \u0627\u0644\u0648\u062d\u062f\u0629 \u0641\u064a \u0645\u062c\u0645\u0648\u0639\u0629 Kubernetes \u0627\u0644\u062a\u064a \u062a\u0633\u062a\u062e\u062f\u0645 \u0648\u0642\u062a \u062a\u0634\u063a\u064a\u0644 CRI-O.\n\n\u0642\u062f\u0645 CrowdStrke \u0623\u064a\u0636\u064b\u0627 POC \u064a\u0633\u062a\u062e\u062f\u0645 PodSpec \u0636\u0627\u0631\u064b\u0627 \u0644\u062a\u0639\u064a\u064a\u0646 \u0645\u0639\u0644\u0645\u0629 kernel kernel.core_pattern \u0639\u0646 \u0637\u0631\u064a\u0642 \u062a\u0634\u063a\u064a\u0644 \u062b\u0646\u0627\u0626\u064a \u0645\u0633\u062a\u0636\u0627\u0641 \u0641\u064a \u0648\u062d\u062f\u0629 \u0646\u0645\u0637\u064a\u0629 \u0623\u062e\u0631\u0649 \u0643\u062c\u0630\u0631.\n\n\u062a\u0645 \u0625\u0635\u0644\u0627\u062d \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0648\u064a\u0646\u0635\u062d \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u0648\u0646 \u0628\u0627\u0644\u062a\u0631\u0642\u064a\u0629 \u0625\u0644\u0649 \u0623\u062d\u062f\u062b \u0625\u0635\u062f\u0627\u0631 \u0645\u0646 CRI-O v1.23.2 \u0644\u0645\u0646\u0639 \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0627\u0644\u0645\u062d\u062a\u0645\u0644\u0629. \u0623\u0648 \u064a\u0645\u0643\u0646\u0643 \u0627\u0644\u0631\u062c\u0648\u0639 \u0625\u0644\u0649 \u0625\u0635\u062f\u0627\u0631 CRI-O 1.18 \u0623\u0648 \u0625\u0635\u062f\u0627\u0631 \u0623\u0642\u062f\u0645.\n\n@A_X_YG\n#\u0627\u0644\u0642\u0627\u0626\u062f_A_X_Y \n#The_Yemeni_ghost", "creation_timestamp": "2022-03-17T18:37:02.000000Z"}, {"uuid": "2127d0c6-966d-4c20-ba1d-b2332c9fc341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/2743", "content": "\u041a\u043e\u043c\u0430\u043d\u0434\u0430 CrowdStrike Cloud Threat Research \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043d\u043e\u043c \u0434\u0432\u0438\u0436\u043a\u0435 CRI-O Container Engine \u0434\u043b\u044f Kubernetes, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f root-\u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0445\u043e\u0441\u0442\u0443.\n\nCRI-O \u2013 \u044d\u0442\u043e \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043d\u0430 OCI (Open Container Initiative) \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f Kubernetes Container Runtime Interface (CRI), \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043e\u0431\u043e\u0439 \u043e\u0431\u043b\u0435\u0433\u0447\u0435\u043d\u043d\u0443\u044e \u0441\u0440\u0435\u0434\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0434\u043b\u044f Kubernetes \u0438 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0430\u044f \u0434\u043b\u044f \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 \u043c\u0435\u0436\u0434\u0443 \u0441\u0440\u0435\u0434\u0430\u043c\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u044b\u043c\u0438 \u0441 OCI, \u0438 kubelet.\n\n\u041f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 cr8escape \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2022-0811 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u044f\u0434\u0440\u0430, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0445 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 pinns.\u00a0\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0430 \u0432 CRI-O \u0432\u0435\u0440\u0441\u0438\u0438 1.19, \u043a\u043e\u0433\u0434\u0430 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0431\u044b\u043b\u0430 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 sysctl, \u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c kernel.core_pattern \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430. \n\n\u041e\u0446\u0435\u043d\u043a\u0430 CVE \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 8,8 (\u0432\u044b\u0441\u043e\u043a\u0430\u044f), \u0430 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0448\u0438\u0440\u043e\u043a\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043c\u043d\u043e\u0433\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 CRI-O \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\u00a0\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f cr8escape \u043f\u043e\u043c\u0438\u043c\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0438 \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0439\u0442\u0438 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 Kubernetes, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0445\u043e\u0441\u0442\u0443 \u0438 \u0438\u043c\u0435\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435. \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u043f\u0440\u0430\u0432\u0430 \u043d\u0430 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u043c\u043e\u0434\u0443\u043b\u044f \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435 Kubernetes, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0441\u0440\u0435\u0434\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f CRI-O. \n\nCrowdStrke \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 POC, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 PodSpec \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 \u044f\u0434\u0440\u0430 kernel.core_pattern, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044f \u043f\u043e\u0434 root \u0434\u0432\u043e\u0438\u0447\u043d\u044b\u0439 \u0444\u0430\u0439\u043b, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0439 \u0432 \u0434\u0440\u0443\u0433\u043e\u043c \u043c\u043e\u0434\u0443\u043b\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 CRI-O v1.23.2, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438. \u0418\u043b\u0438 \u0436\u0435 \u043c\u043e\u0436\u043d\u043e \u043e\u0442\u043a\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u0434\u043e CRI-O \u0432\u0435\u0440\u0441\u0438\u0438 1.18 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0435\u0439.", "creation_timestamp": "2022-03-17T14:30:04.000000Z"}, {"uuid": "dd3b94c0-f8bb-44e4-befe-cc3645082906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "seen", "source": "https://t.me/cibsecurity/39034", "content": "\u203c CVE-2022-0811 \u203c\n\nA flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime to achieve a container escape and arbitrary code execution as root on the cluster node, where the malicious pod was deployed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-16T17:20:37.000000Z"}, {"uuid": "e7a0aba2-c865-4d76-a65f-e7a901842745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/2218", "content": "Mitigating CVE-2022-0811: Arbitrary code execution affecting CRI-O https://sysdig.com/blog/cve-2022-0811-cri-o/", "creation_timestamp": "2026-08-03T01:04:23.724413Z"}, {"uuid": "0d4062e5-ff63-47e8-ac7b-99a86909f179", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "seen", "source": "https://t.me/thehackernews/1987", "content": "A new vulnerability (CVE-2022-0811) in the CRI-O engine, dubbed \u201ccr8escape,\u201d could allow attackers to escape Kubernetes containers and gain root access.\n\nRead details: https://thehackernews.com/2022/03/new-vulnerability-in-cri-o-engine-lets.html", "creation_timestamp": "2023-07-13T10:44:34.000000Z"}, {"uuid": "8cf5a701-c83b-486b-b999-6c3d9ce6c60c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "exploited", "source": "https://t.me/xakep_ru/13806", "content": "HTB Vessel. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435 Kubernetes #\u0441\u0442\u0430\u0442\u044c\u0438 #\u043f\u043e\u0434\u043f\u0438\u0441\u0447\u0438\u043a\u0430\u043c\n\n\u0412 \u044d\u0442\u043e\u043c \u0440\u0430\u0439\u0442\u0430\u043f\u0435 \u044f \u043f\u043e\u043a\u0430\u0436\u0443, \u043a\u0430\u043a \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-0811, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432\u044b\u0445\u043e\u0434\u0438\u0442\u044c \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435 Kubernetes. \u041f\u043e \u0434\u043e\u0440\u043e\u0433\u0435 \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0438\u043c, \u043a\u0430\u043a \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f Git, \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u0438 \u043f\u043e\u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0438\u043c \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 Open Web Analytics, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0445\u043e\u0441\u0442\u0443. \u0415\u0449\u0435 \u0440\u0430\u0437\u0431\u0435\u0440\u0435\u043c\u0441\u044f \u0441 \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u0443\u0435\u043c PDF-\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442.\n\nhttps://xakep.ru/2023/03/27/htb-vessel/", "creation_timestamp": "2023-03-27T13:14:41.000000Z"}, {"uuid": "e6f1f37d-1d51-4679-832b-364ca01b9788", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/5656", "content": "#Whitepaper\n\"Webhook Security Guidelines\".\n\n]-> Simple webhook to block exploitation of CVE-2022-0811:\nhttps://github.com/spiarh/webhook-cve-2022-0811", "creation_timestamp": "2022-03-22T11:02:01.000000Z"}, {"uuid": "22b05b17-2d94-4914-83d6-113b8dea4b15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/5621", "content": "#tools\n#Cloud_Security\ncr8escape - Vulnerability in CRI-O Container Engine (CVE-2022-0811)\nhttps://www.crowdstrike.com/blog/cr8escape-new-vulnerability-discovered-in-cri-o-container-engine-cve-2022-0811", "creation_timestamp": "2023-09-24T15:02:15.000000Z"}, {"uuid": "5848abf3-9e6a-4d4a-878f-8d49b9315d6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "published-proof-of-concept", "source": "https://t.me/Kubesploit/236", "content": "A vulnerability in CRI-O could allow for attackers who are able to create pods in a Kubernetes or OpenShift cluster to break out to the underlying cluster node, effectively escalating their privileges.\n\nMore: https://blog.aquasec.com/cve-2022-0811-cri-o-vulnerability", "creation_timestamp": "2026-08-29T18:00:04.801480Z"}, {"uuid": "ed238632-926b-4ab7-81bb-562557ebf562", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "seen", "source": "https://t.me/reverseame/2218", "content": "Mitigating CVE-2022-0811: Arbitrary code execution affecting CRI-O https://sysdig.com/blog/cve-2022-0811-cri-o/", "creation_timestamp": "2026-07-29T12:02:44.133540Z"}, {"uuid": "a9acc54f-8959-45a8-8218-b0cf63ac3b1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "seen", "source": "https://t.me/cissp/5521", "content": "A new vulnerability (CVE-2022-0811) in the CRI-O engine, dubbed \u201ccr8escape,\u201d could allow attackers to escape Kubernetes containers and gain root access. \n\nRead details: https://thehackernews.com/2022/03/new-vulnerability-in-cri-o-engine-lets.html", "creation_timestamp": "2026-09-01T17:00:31.089896Z"}, {"uuid": "55371397-db32-48ca-a25c-42b330886a76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "seen", "source": "https://t.me/timcore_hacking/2786", "content": "#hackthebox\n#htb\n#hacking\n\nHackTheBox - Pikatwoo\n\n00:00 - Introduction\n01:00 - Start of nmap\n03:15 - Identifying all the technologies used in the box\n10:45 - Looking at OpenStack Keystone Authentication and discovering CVE-2021-38155\n12:15 - Pulling up API DOCS to see how to login to Keystone, then testing lockout\n14:00 - Taking the Burpsuite Request, sending it to FFUF and using a trick to try each password multiple times\n25:30 - Attempting to access Swift as a vendor to bypass auth, using GoBuster and discovering an Android directory with Pokatmon app in it\n35:10 - Start of analyzing the Pokatmon App, examining DNS, setting up a MITM with Burpsuite and Socat\n40:15 - Using Frida to disable TLS Certificate Pinning on Flutter\n45:20 - Discovering the App Signs every request, grabbing the certificate out of the app, and signing our own request\n49:20 - Performing an SQL Injection, getting an email address then looking for vulnerabilities in Forgot Password on the main website\n58:48 - Discovering CVE-2021-43557 in APISIX, which gives us an idea to URLEncode Paths to bypass blacklists and gaining access to the /private/ directory which has a /forgot-password we can use to reset Roger's password\n1:04:45 - Logging into the docs, gaining access to the API and finding an LFI\n1:09:45 - Looking into CVE-2021-35368, which is a ModSecurity Bypass that allows us to abuse the LFI\n1:18:10 - Using NGINX's temporary files with our PHP LFI to gain code execution\n1:27:55 - Shell returned on Pokatdex-API, exporting Kubernetes secrets\n1:34:20 - Discovering an APISIX admin key and exploiting this service by creating a route that executes code\n1:59:20 - Shell returned on the APISIX box, discovering credentials we can SSH with\n2:11:10 - Explioting the CRI-O with Kubernetes to set a kernel param to execute a script when a core dump is created (CVE-2022-0811)\n\n\nhttps://www.youtube.com/watch?v=gRj9Uz8_EOY", "creation_timestamp": "2023-09-14T12:26:19.000000Z"}, {"uuid": "b6c50649-66d2-4510-9987-c0b4c45a7130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "published-proof-of-concept", "source": "https://t.me/timcore_hacking/2786", "content": "#hackthebox\n#htb\n#hacking\n\nHackTheBox - Pikatwoo\n\n00:00 - Introduction\n01:00 - Start of nmap\n03:15 - Identifying all the technologies used in the box\n10:45 - Looking at OpenStack Keystone Authentication and discovering CVE-2021-38155\n12:15 - Pulling up API DOCS to see how to login to Keystone, then testing lockout\n14:00 - Taking the Burpsuite Request, sending it to FFUF and using a trick to try each password multiple times\n25:30 - Attempting to access Swift as a vendor to bypass auth, using GoBuster and discovering an Android directory with Pokatmon app in it\n35:10 - Start of analyzing the Pokatmon App, examining DNS, setting up a MITM with Burpsuite and Socat\n40:15 - Using Frida to disable TLS Certificate Pinning on Flutter\n45:20 - Discovering the App Signs every request, grabbing the certificate out of the app, and signing our own request\n49:20 - Performing an SQL Injection, getting an email address then looking for vulnerabilities in Forgot Password on the main website\n58:48 - Discovering CVE-2021-43557 in APISIX, which gives us an idea to URLEncode Paths to bypass blacklists and gaining access to the /private/ directory which has a /forgot-password we can use to reset Roger's password\n1:04:45 - Logging into the docs, gaining access to the API and finding an LFI\n1:09:45 - Looking into CVE-2021-35368, which is a ModSecurity Bypass that allows us to abuse the LFI\n1:18:10 - Using NGINX's temporary files with our PHP LFI to gain code execution\n1:27:55 - Shell returned on Pokatdex-API, exporting Kubernetes secrets\n1:34:20 - Discovering an APISIX admin key and exploiting this service by creating a route that executes code\n1:59:20 - Shell returned on the APISIX box, discovering credentials we can SSH with\n2:11:10 - Explioting the CRI-O with Kubernetes to set a kernel param to execute a script when a core dump is created (CVE-2022-0811)\n\n\nhttps://www.youtube.com/watch?v=gRj9Uz8_EOY", "creation_timestamp": "2023-09-14T12:26:19.000000Z"}]}