CVE-2022-3262

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

A flaw was found in Openshift. A pod with a DNSPolicy of "ClusterFirst" may incorrectly resolve the hostname based on a service provided. This flaw allows an attacker to supply an incorrect name with the DNS search policy, affecting confidentiality and availability.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-453CWE-1188

Affected software

No affected versions have been published.

Timeline

Published
Dec 8, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-326206.7In mpu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution pCVE-2022-326216.4In isp, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System executCVE-2022-326226.7In gz, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System exeCVE-2022-326236.7In mdp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with SysteCVE-2022-326246.7In throttling, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to local escalation oCVE-2022-326256.7In display, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with CVE-2022-326266.7In display, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with CVE-2022-326286.7In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2022-326296.7In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2022-32637.8The security descriptor of Measuresoft ScadaPro Server version 6.7 has inconsistent permissions, which could allow a local user with limitedCVE-2022-326306.7In throttling, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to local escalation oCVE-2022-326316.7In Wi-Fi, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with Sy
CVE-2022-3262: High severity, CVSS 8.1 | Vulnix