CVE-2022-36109

🗓️ 09 Sep 2022 18:15:10Reported by [email protected]Type

A bug in Moby (Docker Engine) 20.10.18 allows attackers to bypass primary group restrictions and potentially gain access to sensitive information or execute code in a container

Reporter	Title	Published	Views	Family All 98
IBM Security Bulletins	Security Bulletin: Open Source Dependency Vulnerability	15 May 202318:56	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Dependency Vulnerability	15 May 202316:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Docker affect IBM InfoSphere Information Server	14 Oct 202221:28	–	ibm
IBM Security Bulletins	Security Bulletin: Vunerability in docker engine affect pattern Type shipped with Cloud Pak System (CVE-2022-36109)	4 Dec 202315:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	18 Aug 202504:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to assorted vulnerabilities in Grafana	19 Jul 202421:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to Files or Directories Accessible to External Parties in Grafana (CVE-2021-41089, CVE-2022-24769, CVE-2021-41091, CVE-2018-20699, CVE-2022-36109)	5 Aug 202419:51	–	ibm
Tenable Nessus	Amazon Linux 2022 : containerd, containerd-stress (ALAS2022-2022-156)	20 Oct 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : containerd, containerd-stress (ALAS2022-2022-210)	25 Jan 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : containerd, containerd-stress (ALAS2023-2023-079)	21 Mar 202300:00	–	nessus

NVD

Node

mobyproject mobyRange<20.10.18

Node

fedoraproject fedoraMatch36

fedoraproject fedoraMatch37

Source	Link
github	www.github.com/moby/moby/security/advisories/GHSA-rc4r-wh2q-q6c4
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O7JL2QA3RB732MLJ3RMUXB3IB7AA22YU/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQQ4E3JBXVR3VK5FIZVJ3QS2TAOOXXTQ/
github	www.github.com/moby/moby/releases/tag/v20.10.18
github	www.github.com/moby/moby/commit/de7af816e76a7fd3fbf06bffa6832959289fba32
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/O7JL2QA3RB732MLJ3RMUXB3IB7AA22YU
benthamsgaze	www.benthamsgaze.org/2022/08/22/vulnerability-in-linux-containers-investigation-and-mitigation
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/RQQ4E3JBXVR3VK5FIZVJ3QS2TAOOXXTQ

17 Jan 2025 13:15Current

CVSS 3.15.3 - 6.3

EPSS0.0076

CWE-863