CVE-2024-33522

Privilege escalation in Calico CNI install binary

State: Published
Severity: 6.7 Medium
Published: Apr 29, 2024
Updated: Aug 2, 2024
Reserved: Apr 23, 2024

Description

In vulnerable versions of Calico (v3.27.2 and below), Calico Enterprise (v3.19.0-1, v3.18.1, v3.17.3 and below), and Calico Cloud (v19.2.0 and below), an attacker who has local access to the Kubernetes node, can escalate their privileges by exploiting a vulnerability in the Calico CNI install binary. The issue arises from an incorrect SUID (Set User ID) bit configuration in the binary, combined with the ability to control the input binary, allowing an attacker to execute an arbitrary binary with elevated privileges.

Scores

CVSS	Score	Vector	Source
3.1	6.7 Medium	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	Tigera

Weaknesses

CWE-269 Improper Privilege Management

Affected Products

Product	Versions
CalicoTigera	before v3.26.5Affected v3.27.0 to before v3.27.3Affected v3.28.0Not affected
Calico EnterpriseTigera	before v3.17.4Affected v3.18.0 to before v3.18.2Affected v3.19.0-1.0 to before v3.19.0-2.0Affected
Calico CloudTigera	before v19.3.0Affected

References

https://github.com/projectcalico/calico/issues/7981exploitissue-tracking
https://github.com/projectcalico/calico/pull/8447patch
https://github.com/projectcalico/calico/pull/8517patch
https://www.tigera.io/security-bulletins-tta-2024-001/vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.