Lucene search
GoogleOSV:CVE-2022-2995HistorySep 19, 2022 - 8:15 p.m.
CVE-2022-2995
2022-09-1920:15:12
Google
osv.dev
11
cri-o
supplementary groups
sensitive information disclosure
data modification
container engine
access permissions
binary code
Incorrect handling of the supplementary groups in the CRI-O container engine might lead to sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.
Related
osv
osv
github
github
rocky
rocky
container-tools:rhel8 security, bug fix, and enhancement update
2022-11-08 10:51:15
oraclelinux
oraclelinux
container-tools:ol8 security, bug fix, and enhancement update
2022-11-22 00:00:00
podman security, bug fix, and enhancement update
2022-11-24 00:00:00
buildah security and bug fix update
2022-11-22 00:00:00
nessus
nessus
RHEL 8 : container-tools:rhel8 (RHSA-2022:7822)
2022-11-09 00:00:00
CentOS 8 : container-tools:rhel8 (CESA-2022:7822)
2022-11-08 00:00:00
AlmaLinux 9 : podman (ALSA-2022:8431)
2022-11-18 00:00:00
redhat
redhat
almalinux
almalinux
Low: podman security, bug fix, and enhancement update
2022-11-15 00:00:00
Low: container-tools:rhel8 security, bug fix, and enhancement update
2022-11-08 00:00:00
Moderate: buildah security and bug fix update
2022-11-15 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for docker-engine (EulerOS-SA-2023-1864)
2023-05-10 00:00:00
Huawei EulerOS: Security Advisory for docker-engine (EulerOS-SA-2023-1971)
2023-05-18 00:00:00
Huawei EulerOS: Security Advisory for docker-engine (EulerOS-SA-2023-1949)
2023-05-18 00:00:00
ibm
ibm
Security Bulletin: Vunerability in docker engine affect pattern Type shipped with Cloud Pak System (CVE-2022-36109)
2023-12-04 16:01:32
alpinelinux
alpinelinux
fedora
fedora
[SECURITY] Fedora 36 Update: moby-engine-20.10.18-1.fc36
2022-09-15 01:57:00
[SECURITY] Fedora 37 Update: moby-engine-20.10.18-1.fc37
2022-09-16 00:18:25
[SECURITY] Fedora 37 Update: containerd-1.6.8-2.fc37
2022-09-16 00:18:25
cvelist
cvelist
CVE-2023-25173 containerd supplementary groups are not set up properly
2023-02-16 14:09:12
CVE-2022-2990
2022-09-13 13:44:21
veracode
veracode
Information Disclosure
2022-09-12 11:25:08
Privilege Escalation
2023-02-17 08:54:33
Information Disclosure
2022-09-16 06:55:11
prion
prion
Information disclosure
2022-09-09 18:15:00
Information disclosure
2022-09-13 14:15:00
Design/Logic Flaw
2023-02-16 15:15:00
redhatcve
redhatcve
debiancve
debiancve
ubuntucve
ubuntucve
nvd
nvd
cve
cve
cbl_mariner
cbl_mariner
CVE-2023-25173 affecting package moby-containerd 1.6.6+azure-7
2023-03-16 03:40:27
CVE-2023-25173 affecting package k3s 1.24.12-2
2024-07-05 21:08:40
CVE-2022-2990 affecting package buildah for versions less than 1.18.0-24
2024-04-17 23:32:37
cgr
cgr
CVE-2023-25173 vulnerabilities
2024-05-19 03:07:16
wolfi
wolfi
CVE-2023-25173 vulnerabilities
2024-07-05 21:08:40
suse
suse
Security update for podman (moderate)
2022-10-31 00:00:00
Security update for podman (moderate)
2022-10-31 00:00:00
Security update for buildah (important)
2022-10-26 00:00:00
ubuntu
ubuntu
Podman vulnerability
2023-08-16 00:00:00
containerd vulnerabilities
2023-07-05 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2227
2023-09-05 09:31:53
redos
redos
ROS-20230322-02
2023-03-22 00:00:00
mageia
mageia
Updated docker packages fix security vulnerability
2023-01-24 10:58:24