Lucene search
GoogleOSV:CVE-2021-3762HistoryMar 03, 2022 - 10:15 p.m.
CVE-2021-3762
2022-03-0322:15:08
Google
osv.dev
5
claircore engine
directory traversal
remote code execution
software vulnerability
A directory traversal vulnerability was found in the ClairCore engine of Clair. An attacker can exploit this by supplying a crafted container image which, when scanned by Clair, allows for arbitrary file write on the filesystem, potentially allowing for remote code execution.
References
bugzilla.redhat.com/show_bug.cgi?id=2000795
github.com/quay/clair/pull/1379
github.com/quay/clair/pull/1380
github.com/quay/claircore/commit/691f2023a1720a0579e688b69a2f4bfe1f4b7821
github.com/quay/claircore/pull/478
vulmon.com/exploitdetails?qidtp=maillist_oss_security&qid=d19fce9ede06e13dfb5630ece7f14f83
Related
redhat
redhat
(RHSA-2021:3665) Important: Red Hat Quay v3.5.7 bug fix and security update
2021-09-28 15:37:57
github
github
Path traversal in claircore
2022-03-04 00:00:16
veracode
veracode
Directory Traversal
2022-03-04 05:08:16
osv
osv
Path traversal in claircore
2022-03-04 00:00:16
Path traversal in github.com/quay/claircore
2022-07-15 23:30:27
cvelist
cvelist
CVE-2021-3762
2022-03-03 21:41:19
redhatcve
redhatcve
CVE-2021-3762
2021-09-28 12:45:19
cve
cve
CVE-2021-3762
2022-03-03 22:15:08
nvd
nvd
CVE-2021-3762
2022-03-03 22:15:08
prion
prion
Directory traversal
2022-03-03 22:15:00