Skip to content
Fencer Intel
critical 9.1

CVE-2022-0567 json

A flaw was found in ovn-kubernetes.

published 4y ago modified 4mo ago also EUVD-2022-15685

cvss
9.1
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
1.0%
EPSS 1.0% chance of exploitation in 30 days, percentile 64%
public exploits
0
none known

Summary

A flaw was found in ovn-kubernetes. This flaw allows a system administrator or privileged attacker to create an egress network policy that bypasses existing ingress policies of other pods in a cluster, allowing network traffic to access pods that should not be reachable. This issue results in information disclosure and other attacks on other pods that should not be reachable.

Patch / fix

  • ovn ovn-kubernetes 4.7.47, 4.8.36, 4.9.27, 4.10.8

Is CVE-2022-0567 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2022-0567 updated cvss 8.2

ovn-kubernetes: Ingress network policy can be overruled by egress network policy on another pod

  • Red Hat OpenShift Container Platform 4.7 openshift4/ose-ovn-kubernetes v4.7.0-202203311831.p0.g385bc8f.assembly.stream
    fixed: vendor fix RHSA-2022:1166
  • Red Hat OpenShift Container Platform 4.8 openshift4/ose-ovn-kubernetes v4.8.0-202203311830.p0.gaa2c3f4.assembly.stream
    fixed: vendor fix RHSA-2022:1154
  • Red Hat OpenShift Container Platform 4.9 openshift4/ose-ovn-kubernetes v4.9.0-202203311521.p0.ga6eec84.assembly.stream
    fixed: vendor fix RHSA-2022:1158
  • Red Hat OpenShift Container Platform 4.10 openshift4/ose-ovn-kubernetes v4.10.0-202203311829.p0.gc580607.assembly.stream
    fixed: vendor fix RHSA-2022:1162
  • Red Hat OpenShift Container Platform 3.11 openvswitch-ovn-kubernetes, openshift3/ose-ovn-kubernetes Red Hat OpenShift Container Platform 4.7 openshift4/ose-cli v4.7.0-202203251629.p0.gc4ebc7a.assembly.stream, openshift4/ose-pod v4.7.0-202203251629.p0.g0e45f63.assembly.stream, openshift4/ose-etcd v4.7.0-202203251629.p0.gc61e5af.assembly.stream, openshift4/ose-tests v4.7.0-202203251629.p0.g7706ed4.assembly.stream, openshift4/ose-console v4.7.0-202203252006.p0.g59d7e2b.assembly.stream, openshift4/ose-coredns v4.7.0-202203251629.p0.gd4a3ba3.assembly.stream, +130 more Red Hat OpenShift Container Platform 4.8 openshift4/ose-cli v4.8.0-202203241516.p0.g41ff67e.assembly.stream, openshift4/ose-pod v4.8.0-202203251154.p0.gee73ea2.assembly.stream, openshift4/ose-etcd v4.8.0-202203241516.p0.gaefa6bf.assembly.stream, openshift4/ose-tests v4.8.0-202203251154.p0.g2eb8645.assembly.stream, openshift4/ose-console v4.8.0-202203280926.p0.g49f0135.assembly.stream, openshift4/ose-coredns v4.8.0-202203251154.p0.g642b46e.assembly.stream, +137 more Red Hat OpenShift Container Platform 4.9 openshift4/ose-cli v4.9.0-202203251214.p0.ga646be5.assembly.stream, openshift4/ose-pod v4.9.0-202203290927.p0.ga36406b.assembly.stream, openshift4/ose-etcd v4.9.0-202203250906.p0.gf99cada.assembly.stream, openshift4/ose-tests v4.9.0-202203311521.p0.g9321442.assembly.stream, openshift4/ose-console v4.9.0-202203251214.p0.g6cce714.assembly.stream, openshift4/ose-coredns v4.9.0-202203250906.p0.g3cb11c0.assembly.stream, +148 more Red Hat OpenShift Container Platform 4.10 openshift4/ose-cli v4.10.0-202203271029.p0.g346b183.assembly.stream, openshift4/ose-pod v4.10.0-202203270537.p0.g1f952b3.assembly.stream, openshift4/ose-etcd v4.10.0-202203242126.p0.g7bbf25a.assembly.stream, openshift4/ose-tests v4.10.0-202203311432.p0.g2a03871.assembly.stream, openshift4/ose-console v4.10.0-202203311432.p0.g59a6268.assembly.stream, openshift4/ose-coredns v4.10.0-202203242126.p0.g3ec1ee7.assembly.stream, +165 more
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

1.04% chance of exploitation in the next 30 days, higher than 64% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 3.1 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
NVD 2.0 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P

Affected products

  • n/a ovn-kubernetes

Classification

Weakness
  • CWE-20 Improper Input Validation

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.