Not rated
CVE-2022-27649 A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions
Description
A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby (Docker Engine), where containers were started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Podman | Versions not published |
References
- bugzilla.redhat.com bugzilla.redhat.com
- github.com github.com
- github.com github.com
- FEDORA-2022-c87047f163 lists.fedoraproject.org
- FEDORA-2022-2067702f06 lists.fedoraproject.org
- FEDORA-2022-5e637f6cc6 lists.fedoraproject.org
Timeline
- Published
- Last modified
Other CVEs of Podman
The 12 CVEs of Podman →
CVE-2023-0778
A Time-of-check Time-of-use (TOCTOU) flaw was found in podman
6.8
Medium
CVE-2022-4122
A vulnerability was found in buildah
5.3
Medium
CVE-2022-4123
A flaw was found in Buildah
3.3
Low
CVE-2022-2989
An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information…
7.1
High