CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
Low
Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
github.com/opencontainers/runc/commit/d04de3a9b72d7a2455c1885fc75eb36d02cd17b5
github.com/opencontainers/runc/releases/tag/v1.1.2
github.com/opencontainers/runc/security/advisories/GHSA-f3fp-gc8g-vw66
lists.debian.org/debian-lts-announce/2023/03/msg00023.html
lists.fedoraproject.org/archives/list/[email protected]/message/AVPZBV7ISA7QKRPTC7ZXWKMIQI2HZEBB
lists.fedoraproject.org/archives/list/[email protected]/message/D77CKD3AXPMU4PMQIQI5Q74SI4JATNND
lists.fedoraproject.org/archives/list/[email protected]/message/GPQU4YC4AAY54JDXGDQHJEYKSXXG5T2Y
nvd.nist.gov/vuln/detail/CVE-2022-29162
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
Low