Lucene search
PhotonPHSA-2023-4.0-0429HistoryJul 18, 2023 - 12:00 a.m.
Critical Photon OS Security Update - PHSA-2023-4.0-0429
2023-07-1800:00:00
github.com
8
photon os
security update
bindutils
podman
fuse-overlayfs-snapshotter
phsa-2023-4.0-0429
unix
6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10 High
AI Score
Confidence
High
0.007 Low
EPSS
Percentile
80.1%
Updates of [‘fuse-overlayfs-snapshotter’, ‘bindutils’, ‘podman’] packages of Photon OS have been released.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Photon | 4.0 | x86_64 | bindutils | < 9.16.42-1.ph4 | bindutils-9.16.42-1.ph4.x86_64.rpm |
| Photon | 4.0 | x86_64 | podman-gvproxy | < 4.5.1-1.ph4 | podman-gvproxy-4.5.1-1.ph4.x86_64.rpm |
| Photon | 4.0 | x86_64 | fuse-overlayfs-snapshotter | < 1.0.6-1.ph4 | fuse-overlayfs-snapshotter-1.0.6-1.ph4.x86_64.rpm |
| Photon | 4.0 | x86_64 | podman-tests | < 4.5.1-1.ph4 | podman-tests-4.5.1-1.ph4.x86_64.rpm |
| Photon | 4.0 | x86_64 | podman | < 4.5.1-1.ph4 | podman-4.5.1-1.ph4.x86_64.rpm |
| Photon | 4.0 | x86_64 | podman-plugins | < 4.5.1-1.ph4 | podman-plugins-4.5.1-1.ph4.x86_64.rpm |
| Photon | 4.0 | x86_64 | podman-remote | < 4.5.1-1.ph4 | podman-remote-4.5.1-1.ph4.x86_64.rpm |
Related
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0433
2023-07-21 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0038
2023-06-27 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0618
2023-07-26 00:00:00
nessus
nessus
Oracle Linux 8 : buildah (ELSA-2023-12578)
2023-07-20 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.04 : runC vulnerabilities (USN-6088-1)
2023-05-18 00:00:00
Amazon Linux 2 : runc (ALASECS-2023-004)
2023-07-14 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:2003-1)
2023-04-26 00:00:00
Mageia: Security Advisory (MGASA-2023-0125)
2023-04-07 00:00:00
Huawei EulerOS: Security Advisory for docker-engine (EulerOS-SA-2023-2142)
2023-06-09 00:00:00
mageia
mageia
Updated opencontainers-runc packages fix security vulnerability
2023-04-07 00:20:12
Updated docker-containerd packages fix security vulnerability
2023-08-23 22:56:41
Updated docker-containerd packages fix security vulnerability
2022-02-18 03:14:24
oraclelinux
oraclelinux
buildah security update
2023-07-19 00:00:00
aardvark-dns security update
2023-07-19 00:00:00
runc security update
2023-11-11 00:00:00
osv
osv
runc vulnerabilities
2023-05-18 10:03:59
Moderate: runc security update
2023-11-07 00:00:00
runc vulnerabilities
2023-05-23 14:07:29
ubuntu
ubuntu
runC vulnerabilities
2023-05-18 00:00:00
runC vulnerabilities
2023-05-23 00:00:00
containerd vulnerabilities
2023-07-05 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package runc version 1.1.5-alt1
2023-04-20 00:00:00
Security fix for the ALT Linux 10 package runc version 1.0.0-alt12.rc10
2020-02-17 00:00:00
ibm
ibm
almalinux
almalinux
Moderate: runc security update
2023-11-07 00:00:00
redhat
redhat
(RHSA-2023:6380) Moderate: runc security update
2023-11-07 06:03:35
vulnrichment
vulnrichment
CVE-2023-27561
2023-03-03 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: runc-1.1.6-1.fc36
2023-04-21 01:25:12
[SECURITY] Fedora 38 Update: golang-github-opencontainers-runc-1.1.8-2.fc38
2023-08-16 01:22:21
[SECURITY] Fedora 38 Update: runc-1.1.6-1.fc38
2023-04-21 02:09:44
prion
prion
Design/Logic Flaw
2023-03-03 19:15:00
Design/Logic Flaw
2022-01-05 19:15:00
Improper access control
2020-02-12 15:15:00
nvd
nvd
CVE-2023-27561
2023-03-03 19:15:11
CVE-2021-43816
2022-01-05 19:15:08
cve
cve
CVE-2023-27561
2023-03-03 19:15:11
CVE-2021-43816
2022-01-05 19:15:08
alpinelinux
alpinelinux
CVE-2023-27561
2023-03-03 19:15:11
CVE-2021-43816
2022-01-05 19:15:08
github
github
Opencontainers runc Incorrect Authorization vulnerability
2023-03-03 21:30:19
runc AppArmor bypass with symlinked /proc
2023-03-30 20:20:23
debiancve
debiancve
CVE-2023-27561
2023-03-03 19:15:11
CVE-2021-43816
2022-01-05 19:15:08
redhatcve
redhatcve
CVE-2023-27561
2023-03-06 12:59:47
CVE-2021-43816
2022-05-07 13:54:57
cvelist
cvelist
CVE-2023-27561
2023-03-03 00:00:00
CVE-2021-43816 Improper Preservation of Permissions in containerd
2022-01-05 18:55:10
ubuntucve
ubuntucve
CVE-2023-27561
2023-03-03 00:00:00
CVE-2021-43816
2022-01-05 00:00:00
veracode
veracode
Sandbox Restrictions Bypass
2023-03-08 02:33:46
Privilege Escalation
2022-01-08 13:26:49
Denial Of Service (DoS)
2022-06-07 08:26:24
redos
redos
ROS-20231031-01
2023-10-31 00:00:00
ROS-20230322-02
2023-03-22 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2209
2023-08-08 07:51:13
gentoo
gentoo
containerd: Multiple Vulnerabilities
2024-01-31 00:00:00
cnvd
cnvd
Apache containerd resource management error vulnerability
2022-06-14 00:00:00
6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10 High
AI Score
Confidence
High
0.007 Low
EPSS
Percentile
80.1%
Related for PHSA-2023-4.0-0429