CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
Percentile
44.8%
Memory leak. (CVE-2022-23471) Denial of service with maliciously crafted image with a large file (CVE-2023-25153) Security bypass due to improper supplementary group handling. (CVE-2023-25173)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Mageia | 8 | noarch | golang-github-mrunalp-fileutils | < 0.5.0-2 | golang-github-mrunalp-fileutils-0.5.0-2.mga8 |
Mageia | 8 | noarch | docker-containerd | < 1.6.21-1 | docker-containerd-1.6.21-1.mga8 |
bugs.mageia.org/show_bug.cgi?id=31268
lists.fedoraproject.org/archives/list/[email protected]/thread/7KYYYEETR5DEGOQBCMLUC4OEN4O3JGKF/
lists.fedoraproject.org/archives/list/[email protected]/thread/J2URKEEXLEABIVVVLSCXEXL6GIXX3GYN/
lists.suse.com/pipermail/sle-security-updates/2022-December/013215.html
ubuntu.com/security/notices/USN-5776-1
ubuntu.com/security/notices/USN-6202-1