CVE-2024-33522

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-33522
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-33522.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-33522
Aliases
Downstream
Related
Published
2024-04-29T22:19:06.908Z
Modified
2026-07-15T01:49:09.877902260Z
Severity
  • 6.7 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Privilege escalation in Calico CNI install binary
Details

In vulnerable versions of Calico (v3.27.2 and below), Calico Enterprise (v3.19.0-1, v3.18.1, v3.17.3 and below), and Calico Cloud (v19.2.0 and below), an attacker who has local access to the Kubernetes node, can escalate their privileges by exploiting a vulnerability in the Calico CNI install binary. The issue arises from an incorrect SUID (Set User ID) bit configuration in the binary, combined with the ability to control the input binary, allowing an attacker to execute an arbitrary binary with elevated privileges.

Database specific 
{
    "cwe_ids": [
        "CWE-269"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/33xxx/CVE-2024-33522.json",
    "cna_assigner": "Tigera",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "v3.19.0-1.0"
                },
                {
                    "fixed": "v3.19.0-2.0"
                },
                {
                    "fixed": "v19.3.0"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/projectcalico/calico

Affected ranges

Type
GIT
Repo
https://github.com/projectcalico/calico
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
90bd9a5482a386973dd7e1b22b08b0b501014557
Fixed
9a14014143064e3734949ade41aad8295a88e956
Introduced
711528eeb00fd90dde38e87ecee7d1c155cab0e6
Fixed
638464f946657417dd4900724112eb844ce5be03
Introduced
86327ba312ac4e3b2d505c510c0fdd8a714cbb0a
Fixed
88aa888efc7e3df43a6b71b67d670da234175df2
Database specific 
{
    "source": "AFFECTED_FIELD",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "v3.26.5"
        },
        {
            "fixed": "v3.17.4"
        },
        {
            "introduced": "v3.27.0"
        },
        {
            "fixed": "v3.27.3"
        },
        {
            "introduced": "v3.18.0"
        },
        {
            "fixed": "v3.18.2"
        }
    ]
}

Affected versions

v0.*
v0.1.0-typha
v0.1.1-typha
v0.1.2-typha
v0.1.3-typha
v0.1.4-typha
v0.1.5-typha
v0.1.7-typha
v0.2.1-typha
v0.2.2-typha
v0.2.3-pre1-typha
v0.2.3-typha
v0.3.0-typha
v0.3.1-typha
v0.4.0-typha
v0.5.0-typha
v0.5.1-typha
v0.6.0-alpha1-rc1-typha
v0.6.0-alpha1-typha
v0.6.0-beta1-typha
v0.6.0-typha
v2.*
v2.5.0
v2.5.0-calico
v2.5.0-rc2
v2.5.0-rc2-calico
v2.6.0
v2.6.0-calico
v2.6.0-rc1
v2.6.0-rc1-calico
v2.6.0-rc2
v2.6.0-rc2-calico
v2.6.2
v2.6.2-calico
v3.*
v3.0.0
v3.0.0-alpha1-rc1
v3.0.0-alpha1-rc1-calico
v3.0.0-calico
v3.0.1
v3.0.1-calico
v3.0.12
v3.0.12-calico
v3.1.7
v3.1.7-calico
v3.10.0
v3.10.0-0.dev-typha
v3.10.0-calico
v3.10.2
v3.10.2-calico
v3.11.0-0.dev-typha
v3.11.0-typha
v3.11.1
v3.11.1-calico
v3.11.1-typha
v3.12.0-typha
v3.13.0-0.dev-typha
v3.13.0-typha
v3.13.1-typha
v3.13.2-typha
v3.13.3-typha
v3.13.4-typha
v3.13.5-typha
v3.14.0-0.dev-typha
v3.15.0-0.dev-typha
v3.16.0
v3.16.0-0.dev-typha
v3.16.0-calico
v3.16.5
v3.16.5-calico
v3.17.0-0.dev-typha
v3.17.0-typha
v3.17.1-typha
v3.17.2-typha
v3.17.3-typha
v3.17.5
v3.17.5-calico
v3.18.0-typha
v3.18.1
v3.18.1-calico
v3.18.1-typha
v3.18.5
v3.18.5-calico
v3.2.0
v3.2.0-calico
v3.2.0-typha
v3.2.1-typha
v3.2.8
v3.2.8-calico
v3.24.0-0.dev
v3.25.0-0.dev
v3.26.0
v3.26.1
v3.26.2
v3.27.0
v3.27.1
v3.27.2
v3.3.0-typha
v3.3.7
v3.3.7-calico
v3.4.0-0.dev-typha
v3.4.0-typha
v3.4.1-typha
v3.5.0-0.dev-typha
v3.5.0-beta.0-typha
v3.5.0-typha
v3.5.1-typha
v3.6.0-0.dev-typha
v3.6.0-typha
v3.6.1-typha
v3.7.0-0.dev-typha
v3.8.0-0.dev-typha
v3.8.5
v3.8.5-calico
v3.9.0
v3.9.0-0.dev-typha
v3.9.0-calico
v3.9.4
v3.9.4-calico

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-33522.json"