Lucene search
PRIOn knowledge basePRION:CVE-2022-27650HistoryApr 04, 2022 - 8:15 p.m.
Default credentials
2022-04-0420:15:00
PRIOn knowledge base
www.prio-n.com
12
A flaw was found in crun where containers were incorrectly started with non-empty default permissions. A vulnerability was found in Moby (Docker Engine) where containers were started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs.
| CPE | Name | Operator | Version |
|---|---|---|---|
| crun | lt | 1.4.4 | |
| fedora | eq | 34 | |
| enterprise_linux | eq | 8.0 | |
| openshift_container_platform | eq | 4.0 |
Related
osv
osv
CVE-2022-27650
2022-04-04 20:15:10
Moderate: container-tools:3.0 security and bug fix update
2022-05-10 08:01:41
Moderate: container-tools:3.0 security and bug fix update
2022-05-10 08:01:41
ubuntucve
ubuntucve
CVE-2022-27650
2022-04-04 00:00:00
nessus
nessus
Rocky Linux 8 : container-tools:3.0 (RLSA-2022:1793)
2023-11-07 00:00:00
RHEL 8 : container-tools:3.0 (RHSA-2022:1793)
2022-05-11 00:00:00
Oracle Linux 8 : container-tools:3.0 (ELSA-2022-1793)
2022-05-18 00:00:00
rocky
rocky
container-tools:3.0 security and bug fix update
2022-05-10 08:01:41
container-tools:rhel8 security, bug fix, and enhancement update
2022-05-10 08:00:01
almalinux
almalinux
Moderate: container-tools:3.0 security and bug fix update
2022-05-10 08:01:41
Important: container-tools:rhel8 security, bug fix, and enhancement update
2022-05-10 00:00:00
openvas
openvas
Fedora: Security Advisory for crun (FEDORA-2022-10fd054d40)
2022-04-09 00:00:00
Mageia: Security Advisory (MGASA-2022-0141)
2022-04-20 00:00:00
cve
cve
CVE-2022-27650
2022-04-04 20:15:10
cvelist
cvelist
CVE-2022-27650
2022-04-04 19:45:45
oraclelinux
oraclelinux
container-tools:3.0 security and bug fix update
2022-05-17 00:00:00
container-tools:ol8 security, bug fix, and enhancement update
2022-05-17 00:00:00
mageia
mageia
Updated crun packages fix security vulnerability
2022-04-16 00:35:09
debiancve
debiancve
CVE-2022-27650
2022-04-04 20:15:10
fedora
fedora
[SECURITY] Fedora 34 Update: crun-1.4.4-1.fc34
2022-04-08 20:07:48
nvd
nvd
CVE-2022-27650
2022-04-04 20:15:10
veracode
veracode
Privilege Escalation
2022-03-25 04:59:58
alpinelinux
alpinelinux
CVE-2022-27650
2022-04-04 20:15:10
redhat
redhat
redhatcve
redhatcve
CVE-2022-27650
2022-03-31 20:48:36