CVE-2022-1708
CVSS v3
7.5
HIGH
EPSS Score
3.1 %
exploit probability, as of 2026-09-25
CISA KEV
No
known exploited
Exploitation
—
SSVC status
Description
A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API. The ExecSync request runs commands in a container and logs the output of the command. This output is then read by CRI-O after command execution, and it is read in a manner where the entire file corresponding to the output of the command is read in. Thus, if the output of the command is large it is possible to exhaust the memory or the disk space of the node when CRI-O reads the output of the command. The highest threat from this vulnerability is system availability.
Technical details
- Published
- 2022-06-07
Frequently asked questions
What is CVE-2022-1708?
A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API. The ExecSync request runs commands in a container and logs the output of the command. This output is then read by CRI-O after command execution, and it is read in a manner where the entire file corresponding to the output of the command is read in. Thus, if the output of the command is large it is possible to exhaust the memory or the disk space of the node when CRI-O reads the output of the command. The highest threat from this vulnerability is system availability.
Is CVE-2022-1708 actively exploited?
Active exploitation of CVE-2022-1708 has not been confirmed. Its EPSS score was 3.1% on 2026-09-25, the estimated probability of exploitation in the next 30 days.
What is the CVSS score for CVE-2022-1708?
CVE-2022-1708 has a CVSS v3 base score of 7.5 (HIGH severity).
Is CVE-2022-1708 affecting your environment?
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
No credit card required · 500 free checks/month · Free API key
Other 2022 vulnerabilities worth triaging
Ranked by exploit probability (EPSS).