CVE-2022-0071

HIGH 8.8CVE-2022-0071 · Published 19/04/2022 · updated 17/06/2026

In short

CVE-2022-0071 is a HIGH (CVSS 8.8) vulnerability affecting hotdog (hotdog project).
Chance of exploitation in the next 30 days (EPSS): 0.39%, higher than 33.4% of all vulnerabilities.
Fix: update to 1.0.2 or later.

Package	Affected versions	Patched versions
hotdog hotdog_project	`< 1.0.2`	`1.0.2`

Description

Incomplete fix for CVE-2021-3101. Hotdog, prior to v1.0.2, did not mimic the resource limits, device restrictions, or syscall filters of the target JVM process. This would allow a container to exhaust the resources of the host, modify devices, or make syscalls that would otherwise be blocked.

References

bottlerocket-os/hotdog security advisory · Third Party Advisory
unit42.paloaltonetworks.com/aws-log4shell-hot-patch-vulnerabilities · Exploit

More vulnerabilities in hotdog

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free