Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2022-2995

Опубликовано: 19 сент. 2022
Источник: debian

Описание

Incorrect handling of the supplementary groups in the CRI-O container engine might lead to sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
cri-oitppackage

Связанные уязвимости

CVSS3: 7.1
ubuntu
больше 3 лет назад

Incorrect handling of the supplementary groups in the CRI-O container engine might lead to sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.

CVSS3: 3.6
redhat
больше 3 лет назад

Incorrect handling of the supplementary groups in the CRI-O container engine might lead to sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.

CVSS3: 7.1
nvd
больше 3 лет назад

Incorrect handling of the supplementary groups in the CRI-O container engine might lead to sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.

CVSS3: 7.1
msrc
почти 2 года назад

Описание отсутствует

CVSS3: 7.1
github
больше 3 лет назад

CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure