onyx --cves cve-2022-1708

CVE-2022-1708

score: <0.1
cvss: 7.5
epss: 3.2%
published: 2022-06-07
kev added: —
first seen: 2026-10-21

CRI-O contains a memory or disk space exhaustion vulnerability caused by reading large command outputs in ExecSync requests, letting attackers with API access exhaust node resources, exploit requires access to the Kube API.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

2022-06-07 Published
2026-10-21 Tracked by Onyx
2026-10-21 Public PoC

Exploit availability

Public PoC flagged by vulnx; no direct exploit link among the citations.

Weaknesses

CWE-400 CWE-770

References 3

https://github.com/cri-o/cri-o/commit/f032cf649ecc7e0c46718bd9e7814bfb317cb544
https://bugzilla.redhat.com/show_bug.cgi?id=2085361
https://github.com/cri-o/cri-o/security/advisories/GHSA-fcm2-6c3h-pg6j