An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cockpit-podmanUpgrade libslirpUpgrade python3-podmanUpgrade netavarkUpgrade criu-libsUpgrade podman-dockerUpgrade podman-gvproxyUpgrade slirp4netnsUpgrade conmonUpgrade podman-testsUpgrade libslirp-develUpgrade toolboxUpgrade crunUpgrade fuse-overlayfsUpgrade criu-develUpgrade toolbox-testsUpgrade skopeo-testsUpgrade podman-pluginsUpgrade containers-commonUpgrade skopeoUpgrade buildahUpgrade python3-criuUpgrade runcUpgrade critUpgrade podman-catatonitUpgrade criuUpgrade buildah-testsUpgrade container-selinuxUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hookUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade udicaUpgrade podman | Nov 17, 2022 | Sep 13, 2022 |
| Alpine Linux | — | Upgrade buildah | Aug 22, 2024 | Sep 13, 2022 |
| Centos_linux | — | Upgrade toolbox-debuginfoUpgrade toolbox-debugsourceUpgrade criu-develUpgrade containernetworking-plugins-debuginfoUpgrade podman-gvproxyUpgrade podman-dockerUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-testsUpgrade podman-remote-debuginfoUpgrade slirp4netns-debuginfoUpgrade skopeo-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podman-plugins-debuginfoUpgrade libslirp-debugsourceUpgrade runc-debuginfoUpgrade skopeoUpgrade skopeo-testsUpgrade podman-catatonit-debuginfoUpgrade libslirpUpgrade toolboxUpgrade podman-debugsourceUpgrade udicaUpgrade critUpgrade podman-pluginsUpgrade podman-gvproxy-debuginfoUpgrade container-selinuxUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade crunUpgrade conmonUpgrade buildah-debugsourceUpgrade slirp4netnsUpgrade runcUpgrade slirp4netns-debugsourceUpgrade python3-criuUpgrade libslirp-debuginfoUpgrade criu-libs-debuginfoUpgrade podman-debuginfoUpgrade crun-debuginfoUpgrade crun-debugsourceUpgrade containers-commonUpgrade runc-debugsourceUpgrade aardvark-dnsUpgrade criuUpgrade fuse-overlayfsUpgrade containernetworking-pluginsUpgrade buildah-testsUpgrade criu-debugsourceUpgrade podman-catatonitUpgrade toolbox-testsUpgrade python3-podmanUpgrade fuse-overlayfs-debuginfoUpgrade conmon-debugsourceUpgrade skopeo-debugsourceUpgrade podmanUpgrade netavarkUpgrade libslirp-develUpgrade criu-debuginfoUpgrade buildah-debuginfoUpgrade criu-libsUpgrade buildah-tests-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfs-debugsourceUpgrade cockpit-podmanUpgrade buildahUpgrade conmon-debuginfoUpgrade podman-remote | Nov 9, 2022 | Sep 13, 2022 |
| Debian | — | Upgrade golang-github-containers-buildah | Jul 30, 2024 | Sep 13, 2022 |
| Oracle_linux | — | Upgrade crunUpgrade conmonUpgrade python3-criuUpgrade containers-commonUpgrade skopeo-testsUpgrade libslirpUpgrade container-selinuxUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade criu-develUpgrade podman-pluginsUpgrade criu-libsUpgrade netavarkUpgrade skopeoUpgrade critUpgrade python3-podmanUpgrade podmanUpgrade podman-catatonitUpgrade buildah-testsUpgrade cockpit-podmanUpgrade udicaUpgrade podman-testsUpgrade podman-remoteUpgrade podman-dockerUpgrade fuse-overlayfsUpgrade runcUpgrade slirp4netnsUpgrade containernetworking-pluginsUpgrade aardvark-dnsUpgrade buildahUpgrade podman-gvproxyUpgrade criu | Nov 16, 2022 | Aug 22, 2022 |
| Redhat Openshift | — | Upgrade buildah | May 19, 2023 | Aug 22, 2022 |
| Redhat_linux | — | Upgrade libslirpUpgrade python3-criuUpgrade podman-plugins-debuginfoUpgrade toolbox-debuginfoUpgrade skopeo-testsUpgrade containernetworking-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade crun-debuginfoUpgrade skopeo-debuginfoUpgrade criu-develUpgrade slirp4netns-debugsourceUpgrade containers-commonUpgrade crunUpgrade libslirp-debugsourceUpgrade slirp4netns-debuginfoUpgrade conmonUpgrade criu-libsUpgrade fuse-overlayfs-debugsourceUpgrade conmon-debuginfoUpgrade podman-debugsourceUpgrade libslirp-develUpgrade slirp4netnsUpgrade podman-pluginsUpgrade podman-gvproxyUpgrade crun-debugsourceUpgrade podman-remote-debuginfoUpgrade container-selinuxUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-debuginfoUpgrade udicaUpgrade conmon-debugsourceUpgrade podman-catatonitUpgrade toolbox-debugsourceUpgrade aardvark-dnsUpgrade podman-testsUpgrade podman-gvproxy-debuginfoUpgrade buildah-debugsourceUpgrade fuse-overlayfsUpgrade libslirp-debuginfoUpgrade runcUpgrade buildah-testsUpgrade buildah-debuginfoUpgrade skopeoUpgrade podman-remoteUpgrade toolboxUpgrade podman-dockerUpgrade python3-podmanUpgrade cockpit-podmanUpgrade criuUpgrade runc-debugsourceUpgrade skopeo-debugsourceUpgrade containernetworking-pluginsUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade fuse-overlayfs-debuginfoUpgrade critUpgrade netavarkUpgrade criu-libs-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade criu-debuginfoUpgrade toolbox-testsUpgrade buildahUpgrade criu-debugsourceNo solution existsUpgrade buildah-tests-debuginfo | Nov 9, 2022 | Sep 13, 2022 |
| Rocky_linux | — | Upgrade podman-debugsourceUpgrade libslirp-debuginfoUpgrade critUpgrade toolbox-debuginfoUpgrade podman-gvproxyUpgrade podman-pluginsUpgrade buildah-debugsourceUpgrade criu-libs-debuginfoUpgrade podman-catatonitUpgrade crunUpgrade containernetworking-plugins-debuginfoUpgrade criuUpgrade podman-gvproxy-debuginfoUpgrade toolbox-testsUpgrade podman-debuginfoUpgrade podman-remoteUpgrade toolbox-debugsourceUpgrade criu-develUpgrade skopeo-testsUpgrade conmon-debuginfoUpgrade podmanUpgrade podman-catatonit-debuginfoUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade python3-criuUpgrade podman-plugins-debuginfoUpgrade slirp4netns-debuginfoUpgrade libslirp-debugsourceUpgrade runcUpgrade podman-testsUpgrade containernetworking-pluginsUpgrade skopeo-debuginfoUpgrade runc-debuginfoUpgrade slirp4netnsUpgrade runc-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade aardvark-dnsUpgrade containers-commonUpgrade netavarkUpgrade buildah-debuginfoUpgrade conmon-debugsourceUpgrade toolboxUpgrade libslirp-develUpgrade conmonUpgrade crun-debugsourceUpgrade criu-debuginfoUpgrade skopeo-debugsourceUpgrade skopeoUpgrade criu-libsUpgrade fuse-overlayfsUpgrade podman-remote-debuginfoUpgrade buildah-tests-debuginfoUpgrade buildahUpgrade oci-seccomp-bpf-hookUpgrade crun-debuginfoUpgrade libslirpUpgrade containernetworking-plugins-debugsourceUpgrade criu-debugsourceUpgrade buildah-tests | Mar 12, 2024 | Sep 13, 2022 |
| Suse | — | Upgrade libgpg-error0-32bitUpgrade libgpg-error-devel-32bitUpgrade libgpg-error0Upgrade libgpg-error-develUpgrade buildah | Oct 26, 2022 | Sep 13, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 13, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub