QwikSec

Security Database

CVE

CWE

Training

CVE-2022-27649

Published: Apr 4, 2022

Modified: Aug 3, 2024

PUBLISHED

Description

A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby (Docker Engine), where containers were started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs.

Vendor	Product	Versions
n/a	podman	affected `Affects all versions before v4.0.3, Fixed in - v4.0.3`

Weaknesses (CWE)

References

https://bugzilla.redhat.com/show_bug.cgi?id=2066568

x_refsource_MISC

https://github.com/containers/podman/security/advisories/GHSA-qvf8-p83w-v58j

x_refsource_MISC

https://github.com/containers/podman/commit/aafa80918a245edcbdaceb1191d749570f1872d0

x_refsource_MISC

FEDORA-2022-c87047f163

vendor-advisory

x_refsource_FEDORA

FEDORA-2022-2067702f06

vendor-advisory

x_refsource_FEDORA

FEDORA-2022-5e637f6cc6

vendor-advisory

x_refsource_FEDORA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.