CVE-2024-33522
Privilege escalation in Calico CNI install binary
- Published
- Updated
- Reserved
- Assigned by
- Tigera
Description
In vulnerable versions of Calico (v3.27.2 and below), Calico Enterprise (v3.19.0-1, v3.18.1, v3.17.3 and below), and Calico Cloud (v19.2.0 and below), an attacker who has local access to the Kubernetes node, can escalate their privileges by exploiting a vulnerability in the Calico CNI install binary. The issue arises from an incorrect SUID (Set User ID) bit configuration in the binary, combined with the ability to control the input binary, allowing an attacker to execute an arbitrary binary with elevated privileges.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| TigeraCNA (assigner) | 3.1 | Medium6.7 | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Deferred | 3.1 | Medium6.7 | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.22% · top 87% of all CVEs (6 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: total
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.7.
Weakness
Affected products
- affected < v3.26.5
- affected v3.27.0 – < v3.27.3
- unaffected v3.28.0
- affected < v3.17.4
- affected v3.18.0 – < v3.18.2
- affected v3.19.0-1.0 – < v3.19.0-2.0
- affected < v19.3.0
Affected packages
From reviewed advisories of the GitHub Advisory Database.
- Gogithub.com/projectcalico/calicoGHSA-6362-gv4m-53ww (opens in a new tab)
References (4)
- https://github.com/projectcalico/calico/issues/7981 (opens in a new tab)exploitissue-trackingx_transferred
- https://github.com/projectcalico/calico/pull/8447 (opens in a new tab)patchx_transferred
- https://github.com/projectcalico/calico/pull/8517 (opens in a new tab)patchx_transferred
- https://www.tigera.io/security-bulletins-tta-2024-001/ (opens in a new tab)vendor-advisoryx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisory GHSA-6362-gv4m-53ww (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2024-33522)Record last updated .