Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2022-38065

Опубликовано: 21 дек. 2022
Источник: debian

Описание

A privilege escalation vulnerability exists in the oslo.privsep functionality of OpenStack git master 05194e7618 and prior. Overly permissive functionality within tools leveraging this library within a container can lead increased privileges.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
python-oslo.privsepunfixedpackage

Примечания

  • https://talosintelligence.com/vulnerability_reports/TALOS-2022-1599

  • Deemed as additional hardening, but not a security issue by upstream:

  • https://bugs.launchpad.net/oslo.privsep/+bug/1989008

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 3 лет назад

A privilege escalation vulnerability exists in the oslo.privsep functionality of OpenStack git master 05194e7618 and prior. Overly permissive functionality within tools leveraging this library within a container can lead increased privileges.

CVSS3: 8.8
redhat
больше 3 лет назад

A privilege escalation vulnerability exists in the oslo.privsep functionality of OpenStack git master 05194e7618 and prior. Overly permissive functionality within tools leveraging this library within a container can lead increased privileges.

CVSS3: 8.8
nvd
около 3 лет назад

A privilege escalation vulnerability exists in the oslo.privsep functionality of OpenStack git master 05194e7618 and prior. Overly permissive functionality within tools leveraging this library within a container can lead increased privileges.

CVSS3: 8.8
github
около 3 лет назад

A privilege escalation vulnerability exists in the oslo.privsep functionality of OpenStack git master 05194e7618 and prior. Overly permissive functionality within tools leveraging this library within a container can lead increased privileges.

CVSS3: 8.8
fstec
около 3 лет назад

Уязвимость компонента oslo.privsep платформы облачных сервисов Openstack, связанная с небезопасным управлением привилегиями, позволяющая нарушителю повысить свои привилегии