Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2022-2995

Опубликовано: 19 сент. 2022
Источник: debian

Описание

Incorrect handling of the supplementary groups in the CRI-O container engine might lead to sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
cri-oitppackage

Связанные уязвимости

CVSS3: 7.1
ubuntu
около 3 лет назад

Incorrect handling of the supplementary groups in the CRI-O container engine might lead to sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.

CVSS3: 3.6
redhat
больше 3 лет назад

Incorrect handling of the supplementary groups in the CRI-O container engine might lead to sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.

CVSS3: 7.1
nvd
около 3 лет назад

Incorrect handling of the supplementary groups in the CRI-O container engine might lead to sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.

CVSS3: 7.1
msrc
больше 1 года назад

Описание отсутствует

CVSS3: 7.1
github
около 3 лет назад

CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure