An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade fuse-overlayfsUpgrade podman-testsUpgrade libslirp-develUpgrade podman-pluginsUpgrade libslirpUpgrade python3-podmanUpgrade conmonUpgrade skopeo-testsUpgrade netavarkUpgrade podman-dockerUpgrade criu-libsUpgrade toolboxUpgrade cockpit-podmanUpgrade toolbox-testsUpgrade podman-gvproxyUpgrade slirp4netnsUpgrade crunUpgrade criu-develUpgrade podman-catatonitUpgrade skopeoUpgrade critUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade buildahUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade runcUpgrade aardvark-dnsUpgrade podmanUpgrade buildah-testsUpgrade python3-criuUpgrade container-selinuxUpgrade criuUpgrade udica | Nov 17, 2022 | Sep 13, 2022 |
| Alpine Linux | — | Upgrade buildah | Aug 22, 2024 | Sep 13, 2022 |
| Centos_linux | — | Upgrade conmon-debuginfoUpgrade crun-debugsourceUpgrade podman-remoteUpgrade containers-commonUpgrade criuUpgrade fuse-overlayfsUpgrade crun-debuginfoUpgrade toolbox-testsUpgrade containernetworking-pluginsUpgrade python3-podmanUpgrade aardvark-dnsUpgrade podman-catatonitUpgrade conmon-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade cockpit-podmanUpgrade buildah-tests-debuginfoUpgrade skopeo-debugsourceUpgrade buildah-testsUpgrade podmanUpgrade criu-debugsourceUpgrade buildahUpgrade criu-libsUpgrade runc-debugsourceUpgrade buildah-debuginfoUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade criu-debuginfoUpgrade libslirp-develUpgrade netavarkUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade podman-remote-debuginfoUpgrade crunUpgrade critUpgrade libslirp-debugsourceUpgrade skopeo-debuginfoUpgrade toolbox-debuginfoUpgrade skopeoUpgrade runcUpgrade conmonUpgrade slirp4netns-debugsourceUpgrade skopeo-testsUpgrade podman-gvproxy-debuginfoUpgrade udicaUpgrade runc-debuginfoUpgrade buildah-debugsourceUpgrade podman-pluginsUpgrade slirp4netns-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade toolbox-debugsourceUpgrade podman-testsUpgrade podman-dockerUpgrade criu-develUpgrade criu-libs-debuginfoUpgrade libslirp-debuginfoUpgrade libslirpUpgrade podman-gvproxyUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-debugsourceUpgrade slirp4netnsUpgrade container-selinuxUpgrade podman-plugins-debuginfoUpgrade toolboxUpgrade python3-criu | Nov 9, 2022 | Sep 13, 2022 |
| Debian | — | Upgrade golang-github-containers-buildah | Jul 30, 2024 | Sep 13, 2022 |
| Oracle_linux | — | Upgrade cockpit-podmanUpgrade buildahUpgrade runcUpgrade criuUpgrade python3-podmanUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade containernetworking-pluginsUpgrade fuse-overlayfsUpgrade netavarkUpgrade critUpgrade buildah-testsUpgrade podman-catatonitUpgrade podman-remoteUpgrade udicaUpgrade podman-testsUpgrade podman-dockerUpgrade podmanUpgrade aardvark-dnsUpgrade skopeoUpgrade criu-develUpgrade containers-commonUpgrade libslirp-develUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hookUpgrade container-selinuxUpgrade libslirpUpgrade crunUpgrade criu-libsUpgrade skopeo-testsUpgrade conmonUpgrade python3-criu | Nov 16, 2022 | Aug 22, 2022 |
| Redhat Openshift | — | Upgrade buildah | May 19, 2023 | Aug 22, 2022 |
| Redhat_linux | — | Upgrade skopeoUpgrade libslirp-debuginfoUpgrade buildah-testsUpgrade cockpit-podmanUpgrade critUpgrade runcUpgrade podmanUpgrade python3-podmanUpgrade podman-remoteUpgrade buildah-tests-debuginfoUpgrade toolbox-testsUpgrade podman-dockerUpgrade runc-debugsourceUpgrade podman-debuginfoUpgrade podman-catatonitUpgrade criuUpgrade buildah-debuginfoUpgrade podman-catatonit-debuginfoUpgrade conmon-debugsourceUpgrade aardvark-dnsUpgrade containernetworking-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade criu-libs-debuginfoUpgrade toolboxUpgrade udicaUpgrade podman-testsUpgrade toolbox-debugsourceUpgrade netavarkNo solution existsUpgrade criu-debuginfoUpgrade fuse-overlayfsUpgrade buildah-debugsourceUpgrade criu-debugsourceUpgrade skopeo-debugsourceUpgrade buildahUpgrade podman-debugsourceUpgrade slirp4netns-debugsourceUpgrade crunUpgrade libslirpUpgrade conmon-debuginfoUpgrade skopeo-debuginfoUpgrade criu-libsUpgrade libslirp-debugsourceUpgrade container-selinuxUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debuginfoUpgrade skopeo-testsUpgrade runc-debuginfoUpgrade podman-pluginsUpgrade fuse-overlayfs-debugsourceUpgrade libslirp-develUpgrade crun-debuginfoUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade podman-remote-debuginfoUpgrade criu-develUpgrade toolbox-debuginfoUpgrade python3-criuUpgrade podman-plugins-debuginfoUpgrade podman-gvproxyUpgrade slirp4netnsUpgrade conmonUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade crun-debugsource | Nov 9, 2022 | Sep 13, 2022 |
| Rocky_linux | — | Upgrade skopeo-debuginfoUpgrade criu-develUpgrade toolbox-debugsourceUpgrade podman-testsUpgrade slirp4netns-debuginfoUpgrade criuUpgrade runcUpgrade criu-libs-debuginfoUpgrade containernetworking-pluginsUpgrade podman-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-remoteUpgrade containernetworking-plugins-debuginfoUpgrade toolbox-testsUpgrade python3-criuUpgrade skopeo-testsUpgrade podman-catatonit-debuginfoUpgrade slirp4netns-debugsourceUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podmanUpgrade conmon-debuginfoUpgrade podman-gvproxyUpgrade podman-catatonitUpgrade podman-pluginsUpgrade podman-debugsourceUpgrade critUpgrade libslirp-debuginfoUpgrade toolbox-debuginfoUpgrade buildah-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade crunUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-debuginfoUpgrade netavarkUpgrade skopeo-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade containers-commonUpgrade buildah-debuginfoUpgrade criu-libsUpgrade skopeoUpgrade libslirp-develUpgrade conmon-debugsourceUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade fuse-overlayfs-debugsourceUpgrade buildah-tests-debuginfoUpgrade crun-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade buildahUpgrade podman-remote-debuginfoUpgrade toolboxUpgrade libslirpUpgrade criu-debugsourceUpgrade runc-debuginfoUpgrade slirp4netnsUpgrade runc-debugsourceUpgrade conmonUpgrade crun-debugsource | Mar 12, 2024 | Sep 13, 2022 |
| Suse | — | Upgrade libgpg-error-develUpgrade buildahUpgrade libgpg-error0Upgrade libgpg-error-devel-32bitUpgrade libgpg-error0-32bit | Oct 26, 2022 | Sep 13, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 13, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub