CVE-2022-0071

Incomplete fix for CVE-2021-3101. Hotdog, prior to v1.0.2, did not mimic the resource limits, device restrictions, or syscall filters of the target JVM process. This would allow a container to exhaust the resources of the host, modify devices, or make syscalls that would otherwise be blocked.

• CWE-250
• CWE-269

• https://github.com/bottlerocket-os/hotdog/security/advisories/GHSA-jr96-7frv-3mpjThird Party Advisory
• https://unit42.paloaltonetworks.com/aws-log4shell-hot-patch-vulnerabilitiesExploit, Patch, Third Party Advisory
• https://github.com/bottlerocket-os/hotdog/security/advisories/GHSA-jr96-7frv-3mpjThird Party Advisory
• https://unit42.paloaltonetworks.com/aws-log4shell-hot-patch-vulnerabilitiesExploit, Patch, Third Party Advisory

Published

Apr 19, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-0027An improper authorization vulnerability in Palo Alto Network…4.3
• CVE-2022-0028A PAN-OS URL filtering policy misconfiguration could allow a…8.6
• CVE-2022-0029An improper link resolution vulnerability in the Palo Alto N…5.5
• CVE-2022-0030An authentication bypass vulnerability in the Palo Alto Netw…8.1
• CVE-2022-0031A local privilege escalation (PE) vulnerability in the Palo …6.7
• CVE-2022-0070Incomplete fix for CVE-2021-3100. The Apache Log4j hotpatch …8.8
• CVE-2022-0072Directory Traversal vulnerability in LiteSpeed Technologies …5.8
• CVE-2022-0073Improper Input Validation vulnerability in LiteSpeed Technol…8.8
• CVE-2022-0074Untrusted Search Path vulnerability in LiteSpeed Technologie…8.8
• CVE-2022-0079showdoc is vulnerable to Generation of Error Message Contain…5.3
• CVE-2022-0080mruby is vulnerable to Heap-based Buffer Overflow9.8
• CVE-2022-0083livehelperchat is vulnerable to Generation of Error Message …5.3