Lucene search

CVE-2022-24769

🗓️ 24 Mar 2022 20:09:15Reported by GitHub_MType

cve🔗 web.nvd.nist.gov👁 286 Views🌐 6 Media mentions

Moby bug pre v20.10.14 enables unprivileged users and processes to gain file capabilities

Reporter	Title	Published	Views	Family All 102
Fedora	[SECURITY] Fedora 35 Update: moby-engine-20.10.14-1.fc35	26 Apr 202207:32	–	fedora
Fedora	[SECURITY] Fedora 35 Update: containerd-1.6.2-1.fc35	11 Apr 202217:17	–	fedora
Fedora	[SECURITY] Fedora 36 Update: containerd-1.6.2-1.fc36	7 May 202204:49	–	fedora
Fedora	[SECURITY] Fedora 34 Update: containerd-1.6.2-2.fc34	11 Apr 202217:41	–	fedora
Fedora	[SECURITY] Fedora 34 Update: moby-engine-20.10.14-1.fc34	26 Apr 202206:57	–	fedora
Fedora	[SECURITY] Fedora 36 Update: moby-engine-20.10.14-1.fc36	7 May 202205:04	–	fedora
Amazon	Medium: containerd, docker	25 Apr 202215:57	–	amazon
Amazon	Medium: containerd	25 Apr 202203:47	–	amazon
Tenable Nessus	EulerOS 2.0 SP9 : docker-engine (EulerOS-SA-2022-1993)	8 Jul 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : docker-engine (EulerOS-SA-2022-2154)	29 Jul 202200:00	–	nessus

Nvd

Vulners

Node

mobyproject mobyRange<20.10.14

AND

linux linux_kernelMatch-

Node

fedoraproject fedoraMatch34

fedoraproject fedoraMatch35

fedoraproject fedoraMatch36

Node

linuxfoundation runcRange<1.1.2

Node

debian debian_linuxMatch11.0

[
  {
    "vendor": "moby",
    "product": "moby",
    "versions": [
      {
        "version": "< 20.10.14",
        "status": "affected"
      }
    ]
  }
]

Source	Link
debian	www.debian.org/security/2022/dsa-5162
github	www.github.com/moby/moby/commit/2bbc786e4c59761d722d2d1518cd0a32829bc07f
openwall	www.openwall.com/lists/oss-security/2022/05/12/1
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HIMAHZ6AUIKN7AX26KHZYBXVECIOVWBH/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQCVS7WBFSTKJFNX5PGDRARMTOFWV2O7/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6PMQKCAPK2AR3DCYITJYMMNBEGQBGLCC/
security	www.security.gentoo.org/glsa/202401-31
github	www.github.com/moby/moby/security/advisories/GHSA-2mm7-x5h6-5pvq
github	www.github.com/moby/moby/releases/tag/v20.10.14
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A5AFKOQ5CE3CEIULWW4FLQKHFFU6FSYG/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 Mar 2022 20:15Current

6.3Medium risk

Vulners AI Score6.3

CVSS24.6

CVSS35.9

EPSS0.002

CWE-732