CVE-2022-3262
published 2022-12-08CVE-2022-3262: A flaw was found in Openshift. A pod with a DNSPolicy of "ClusterFirst" may incorrectly resolve the hostname based on a service provided. This flaw allows an…
PriorityP345high8.1CVSS 3.1
AVNACLPRLUINSUCHINAH
EPSS
0.72%
50.0th percentile
A flaw was found in Openshift. A pod with a DNSPolicy of "ClusterFirst" may incorrectly resolve the hostname based on a service provided. This flaw allows an attacker to supply an incorrect name with the DNS search policy, affecting confidentiality and availability.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | openshift | — | — |
CVSS provenance
nvdv3.18.1HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
vendor_redhat8.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
openshift: insecure default DNSPolicy for pods
vendor_redhat·2022-09-21·CVSS 8.1
CVE-2022-3262 [HIGH] CWE-453 openshift: insecure default DNSPolicy for pods
openshift: insecure default DNSPolicy for pods
A flaw was found in Openshift. A pod with a DNSPolicy of "ClusterFirst" may incorrectly resolve the hostname based on a service provided. This flaw allows an attacker to supply an incorrect name with the DNS search policy, affecting confidentiality and availability.
A flaw was found in Openshift. A pod with a DNSPolicy of "ClusterFirst" may incorrectly resolve the hostname based on a service provided. This flaw allows an attacker to supply an incorrect name with the DNS search policy, affecting confidentiality and availability.
Statement: This flaw was found in OpenShift’s DNS resolution when pods use the ClusterFirst DNS policy. The vulnerability exists due to the way how the DNS search path is expanded, if an attacker creates a namespace
VulDB
OpenShift DNSPolicy variable initialization (EUVD-2022-42664)
vuldb·2026-07-11·CVSS 8.1
CVE-2022-3262 [HIGH] OpenShift DNSPolicy variable initialization (EUVD-2022-42664)
A vulnerability was found in OpenShift. It has been classified as critical. This affects an unknown part of the component DNSPolicy Handler. The manipulation leads to insecure default variable initialization.
This vulnerability is traded as CVE-2022-3262. It is possible to initiate the attack remotely. There is no exploit available.
GHSA
GHSA-j37r-c8v9-736q: A flaw was found in Openshift
ghsa_unreviewed·2022-12-08
CVE-2022-3262 [HIGH] CWE-1188 GHSA-j37r-c8v9-736q: A flaw was found in Openshift
A flaw was found in Openshift. A pod with a DNSPolicy of "ClusterFirst" may incorrectly resolve the hostname based on a service provided. This flaw allows an attacker to supply an incorrect name with the DNS search policy, affecting confidentiality and availability.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-12-08
Published