Lucene search

PRIOn knowledge basePRION:CVE-2022-42150

HistoryOct 19, 2023 - 8:15 p.m.

Default configuration

2023-10-1920:15:00

PRIOn knowledge base

www.prio-n.com

default configuration

tinylab linux-lab

cloud-labv0.8-rc2

v1.1-rc1

insecure permissions

container escape

nvd

9.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.4%

JSON

TinyLab linux-lab v1.1-rc1 and cloud-labv0.8-rc2, v1.1-rc1 are vulnerable to insecure permissions. The default configuration could cause Container Escape.

CPENameOperatorVersion
cloud_labeq1.1 rc1
cloud_labeq0.8 rc2
linux_labeq1.1 rc1

Name	Operator	Version
cloud_lab	eq	1.1 rc1
cloud_lab	eq	0.8 rc2
linux_lab	eq	1.1 rc1

References

github.com/eBPF-Research/eBPF-Attack/blob/main/PoC.md

github.com/tinyclub/cloud-lab/blob/d19ff92713685a7fb84b423dea6a184b25c378c9/configs/common/seccomp-profiles-default.json

github.com/tinyclub/linux-lab/issues/14

hackmd.io/@UR9gnr32QymtmtZHnZceOw/ry428EZGo

www.usenix.org/conference/usenixsecurity23/presentation/he