Moderate severityNVD Advisory· Published Apr 18, 2022· Updated Aug 3, 2024
CVE-2022-27652
CVE-2022-27652
Description
A flaw was found in cri-o, where containers were incorrectly started with non-empty default permissions. A vulnerability was found in Moby (Docker Engine) where containers started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/cri-o/cri-oGo | < 1.24.0 | 1.24.0 |
Affected products
2Patches
Vulnerability mechanics
References
4- github.com/advisories/GHSA-4hj2-r2pm-3hc6ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2022-27652ghsaADVISORY
- bugzilla.redhat.com/show_bug.cgighsax_refsource_MISCWEB
- github.com/cri-o/cri-o/security/advisories/GHSA-4hj2-r2pm-3hc6ghsax_refsource_MISCWEB
News mentions
0No linked articles in our index yet.