8 matches found
docker_lightman_exploit
استغلال Docker Lightman Docker CVE-2022-37708. يعتمد هذا الاستغلال على كيفية احتواء نظام ملفات UNIX على UID و GID للملفات التي يشاركها Docker بين المضيف الذي يشغّل Docker والعميل الذي يُشغّل داخل Docker، وكذلك يعتمد على طبيعة كيفية عمل ملكية معرفات العمليات. المشكلة باختصار. يقوم Docker بتعيين...
Amazon Linux 2 : docker (ALASDOCKER-2023-024)
The version of docker installed on the remote host is prior to 20.10.22-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2023-024 advisory. A flaw was found in Moby. This flaw allows an attacker to bypass primary group restrictions due to a flaw in the...
Amazon Linux 2 : docker (ALASNITRO-ENCLAVES-2023-022)
The version of docker installed on the remote host is prior to 20.10.22-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2023-022 advisory. A flaw was found in Moby. This flaw allows an attacker to bypass primary group restrictions due to a flaw i...
Amazon Linux 2 : docker (ALASDOCKER-2023-022)
The version of docker installed on the remote host is prior to 20.10.23-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2023-022 advisory. A flaw was found in Moby. This flaw allows an attacker to bypass primary group restrictions due to a flaw in the...
Medium: docker
Issue Overview: A flaw was found in Moby. This flaw allows an attacker to bypass primary group restrictions due to a flaw in the supplementary group access setup. CVE-2022-36109 Docker version 20.10.15, build fd82621 is vulnerable to Insecure Permissions. Unauthorized users outside the Docker...
CVE-2022-37708
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
