New hunter module to detect cr8escape / CVE-2022-0811

[nilesh-akhade]

What would you like to be added

New hunter module should be able to detect if the cluster is affected by cr8escape

Introduce new hunter modules that perform additional tests to detect container runtime and know if it is vulnerable.

Why is this needed

A local attacker could exploit this vulnerability to take control of an affected Kubernetes environment that use CRI-O runtime containers.

Reference

• https://www.crowdstrike.com/blog/cr8escape-new-vulnerability-discovered-in-cri-o-container-engine-cve-2022-0811/
• https://www.cisa.gov/uscert/ncas/current-activity/2022/03/18/cri-o-security-update-kubernetes