VDB
GHSA-qr9q-882c-gv4j
GHSA-qr9q-882c-gv4j
PUBLISHED
CVSS 6.5 MEDIUM
Record from GitHub Advisory Database · Published May 24, 2022
A flaw was found in the Restricted Security Context Constraints (SCC), where it allows pods to craft custom network packets. This flaw allows an attacker to cause a denial of service attack on an OpenShift Container Platform cluster if they can deploy pods. The highest threat from this vulnerability is to system availability.
Risk scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Timeline
- May 24, 2022 CVE Published
- Apr 30, 2026 Distribution Patch (2 in total, the first dated here)
- Apr 30, 2026 Security Advisory (3 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-qr9q-882c-gv4j
vulnetix vdb fixes GHSA-qr9q-882c-gv4jOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-qr9q-882c-gv4j/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart