An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-testsUpgrade crunUpgrade toolboxUpgrade podman-gvproxyUpgrade libslirp-develUpgrade toolbox-testsUpgrade podman-dockerUpgrade netavarkUpgrade libslirpUpgrade cockpit-podmanUpgrade criu-develUpgrade python3-podmanUpgrade slirp4netnsUpgrade fuse-overlayfsUpgrade criu-libsUpgrade conmonUpgrade podman-pluginsUpgrade skopeo-testsUpgrade podman-remoteUpgrade critUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hookUpgrade criuUpgrade udicaUpgrade containers-commonUpgrade skopeoUpgrade container-selinuxUpgrade aardvark-dnsUpgrade containernetworking-pluginsUpgrade runcUpgrade buildah-testsUpgrade buildahUpgrade podmanUpgrade python3-criu | Nov 17, 2022 | Sep 13, 2022 |
| Alpine Linux | — | Upgrade buildah | Aug 22, 2024 | Sep 13, 2022 |
| Centos_linux | — | Upgrade runc-debugsourceUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade aardvark-dnsUpgrade containernetworking-pluginsUpgrade criu-libsUpgrade buildah-tests-debuginfoUpgrade criuUpgrade python3-podmanUpgrade conmon-debugsourceUpgrade buildah-debuginfoUpgrade fuse-overlayfsUpgrade crun-debuginfoUpgrade containers-commonUpgrade cockpit-podmanUpgrade conmon-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade crun-debugsourceUpgrade podman-remoteUpgrade buildahUpgrade buildah-testsUpgrade podmanUpgrade netavarkUpgrade libslirp-develUpgrade criu-debugsourceUpgrade criu-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podman-catatonitUpgrade skopeo-debugsourceUpgrade toolbox-testsUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade toolbox-debuginfoUpgrade podman-plugins-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade container-selinuxUpgrade skopeo-debuginfoUpgrade libslirp-debuginfoUpgrade slirp4netnsUpgrade runcUpgrade podman-gvproxyUpgrade udicaUpgrade toolboxUpgrade runc-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade skopeo-testsUpgrade skopeoUpgrade buildah-debugsourceUpgrade podman-remote-debuginfoUpgrade podman-pluginsUpgrade python3-criuUpgrade crunUpgrade critUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade criu-develUpgrade toolbox-debugsourceUpgrade slirp4netns-debuginfoUpgrade podman-testsUpgrade podman-dockerUpgrade criu-libs-debuginfoUpgrade libslirpUpgrade podman-debugsourceUpgrade conmonUpgrade podman-catatonit-debuginfoUpgrade libslirp-debugsource | Nov 9, 2022 | Sep 13, 2022 |
| Debian | — | Upgrade golang-github-containers-buildah | Jul 30, 2024 | Sep 13, 2022 |
| Oracle_linux | — | Upgrade podman-testsUpgrade udicaUpgrade podman-remoteUpgrade skopeoUpgrade podman-dockerUpgrade podman-catatonitUpgrade cockpit-podmanUpgrade buildah-testsUpgrade buildahUpgrade netavarkUpgrade critUpgrade slirp4netnsUpgrade aardvark-dnsUpgrade containernetworking-pluginsUpgrade python3-podmanUpgrade podmanUpgrade criuUpgrade podman-gvproxyUpgrade fuse-overlayfsUpgrade runcUpgrade libslirpUpgrade conmonUpgrade criu-develUpgrade containers-commonUpgrade skopeo-testsUpgrade container-selinuxUpgrade libslirp-develUpgrade python3-criuUpgrade crunUpgrade oci-seccomp-bpf-hookUpgrade podman-pluginsUpgrade criu-libs | Nov 16, 2022 | Aug 22, 2022 |
| Redhat Openshift | — | Upgrade buildah | May 19, 2023 | Aug 22, 2022 |
| Redhat_linux | — | Upgrade criu-develUpgrade podman-remote-debuginfoUpgrade podman-gvproxyUpgrade conmon-debuginfoUpgrade python3-criuUpgrade containernetworking-plugins-debuginfoUpgrade toolbox-debuginfoUpgrade podman-pluginsUpgrade crun-debugsourceUpgrade runc-debuginfoUpgrade conmonUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade container-selinuxUpgrade slirp4netnsUpgrade slirp4netns-debuginfoUpgrade slirp4netns-debugsourceUpgrade libslirp-develUpgrade podman-plugins-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-libsUpgrade podman-debugsourceUpgrade skopeo-debuginfoUpgrade containers-commonUpgrade crunUpgrade oci-seccomp-bpf-hookUpgrade crun-debuginfoUpgrade libslirpUpgrade podman-testsUpgrade buildah-tests-debuginfoUpgrade cockpit-podmanUpgrade criu-libs-debuginfoUpgrade aardvark-dnsUpgrade toolboxUpgrade fuse-overlayfsUpgrade udicaUpgrade buildah-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade podman-dockerUpgrade criu-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade toolbox-testsUpgrade criu-debugsourceUpgrade skopeo-debugsourceUpgrade conmon-debugsourceUpgrade containernetworking-pluginsNo solution existsUpgrade skopeoUpgrade buildah-testsUpgrade toolbox-debugsourceUpgrade buildah-debuginfoUpgrade podman-catatonit-debuginfoUpgrade libslirp-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podman-remoteUpgrade runcUpgrade critUpgrade python3-podmanUpgrade buildahUpgrade criuUpgrade netavarkUpgrade podman-debuginfoUpgrade podman-catatonitUpgrade runc-debugsourceUpgrade podman | Nov 9, 2022 | Sep 13, 2022 |
| Rocky_linux | — | Upgrade podman-testsUpgrade libslirp-debugsourceUpgrade containernetworking-pluginsUpgrade podman-plugins-debuginfoUpgrade podman-catatonit-debuginfoUpgrade criu-develUpgrade slirp4netns-debuginfoUpgrade podmanUpgrade runcUpgrade slirp4netns-debugsourceUpgrade conmon-debuginfoUpgrade python3-criuUpgrade skopeo-testsUpgrade criuUpgrade criu-libs-debuginfoUpgrade critUpgrade toolbox-debugsourceUpgrade libslirp-debuginfoUpgrade buildah-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-pluginsUpgrade skopeo-debuginfoUpgrade podman-debugsourceUpgrade podman-debuginfoUpgrade toolbox-debuginfoUpgrade podman-gvproxyUpgrade podman-catatonitUpgrade toolbox-testsUpgrade containernetworking-plugins-debuginfoUpgrade crunUpgrade podman-gvproxy-debuginfoUpgrade podman-remoteUpgrade containers-commonUpgrade crun-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade aardvark-dnsUpgrade skopeo-debugsourceUpgrade libslirpUpgrade runc-debuginfoUpgrade toolboxUpgrade podman-remote-debuginfoUpgrade runc-debugsourceUpgrade criu-debuginfoUpgrade fuse-overlayfsUpgrade conmonUpgrade skopeoUpgrade criu-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade netavarkUpgrade fuse-overlayfs-debugsourceUpgrade buildah-testsUpgrade oci-seccomp-bpf-hookUpgrade buildah-tests-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade buildahUpgrade crun-debuginfoUpgrade slirp4netnsUpgrade buildah-debuginfoUpgrade criu-libsUpgrade conmon-debugsourceUpgrade libslirp-devel | Mar 12, 2024 | Sep 13, 2022 |
| Suse | — | Upgrade libgpg-error-develUpgrade buildahUpgrade libgpg-error-devel-32bitUpgrade libgpg-error0-32bitUpgrade libgpg-error0 | Oct 26, 2022 | Sep 13, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 13, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub