CVE-2022-1708

CVE-2022-1708 is a high-severity vulnerability in CRI-O, affecting products like Fedora Project, Kubernetes, and Red Hat. It allows an attacker with Kube API access to exhaust a node's memory or disk space by executing commands in a container that produce large outputs, which CRI-O then reads entirely. This can lead to a denial of service, impacting system availability. The vulnerability has a CVSS score of 7.5 (High) with an attack vector of Network and low attack complexity, requiring no user interaction. Its primary impact is on availability (A:H). Currently, there is no evidence of active exploitation, nor is there publicly available exploit code in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, which is typical for the majority of CVEs.