AZL-9698 CVE-2022-24769 affecting package moby-runc for versions less than 1.1.2-2

🗓️ 24 Mar 2022 20:15:09Reported by GoogleType

osv🔗 osv.dev👁 4 Views

Bug in Moby Docker Engine allowed containers to gain inheritable file capabilities up to the bounding set; fixed in version 20.10.14.

Reporter	Title	Published	Views	Family All 153
IBM Security Bulletins	Security Bulletin: Open Source Dependency Vulnerability	15 May 202318:56	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Dependency Vulnerability	15 May 202316:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a containerd security vulnerability (CVE-2022-24769)	19 Apr 202212:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Docker affect IBM InfoSphere Information Server	14 Oct 202221:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	18 Aug 202504:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to assorted vulnerabilities in Grafana	19 Jul 202421:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Concert is vulnerable to multiple issues due to Cloud Pak Openshift	29 Aug 202415:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to Files or Directories Accessible to External Parties in Grafana (CVE-2021-41089, CVE-2022-24769, CVE-2021-41091, CVE-2018-20699, CVE-2022-36109)	5 Aug 202419:51	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package docker-engine version 20.10.14-alt1	1 Apr 202200:00	–	altlinux
ATTACKERKB	CVE-2022-24769	24 Mar 202220:15	–	attackerkb

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-24769

21 Apr 2026 04:35Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.15.9

EPSS0.00492