Lucene search
Veracode Vulnerability DatabaseVERACODE:36998HistorySep 12, 2022 - 11:25 a.m.
Information Disclosure
2022-09-1211:25:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
18
github
moby
software
information disclosure
input validation
sensitive information
system
0.002 Low
EPSS
Percentile
56.3%
github.com/moby/moby is vulnerable to information disclosure. The vulnerability exists in the getUser function in oci_linux.go due to a lack of input validation, allowing an attacker to read sensitive information in the system.
References
bugs.gentoo.org/show_bug.cgi?id=CVE-2022-36109
bugs.gentoo.org/show_bug.cgi?id=CVE-2022-36109
github.com/moby/moby/commit/de7af816e76a7fd3fbf06bffa6832959289fba32
github.com/moby/moby/releases/tag/v20.10.18
github.com/moby/moby/security/advisories/GHSA-rc4r-wh2q-q6c4
lists.fedoraproject.org/archives/list/[email protected]/message/O7JL2QA3RB732MLJ3RMUXB3IB7AA22YU/
lists.fedoraproject.org/archives/list/[email protected]/message/RQQ4E3JBXVR3VK5FIZVJ3QS2TAOOXXTQ/
Related
nessus
nessus
SUSE SLES15 / openSUSE 15 Security Update : docker (SUSE-SU-2023:0795-1)
2023-03-18 00:00:00
Amazon Linux 2023 : docker (ALAS2023-2023-143)
2023-03-23 00:00:00
SUSE SLES12 Security Update : docker (SUSE-SU-2023:1625-1)
2023-03-29 00:00:00
openvas
openvas
Fedora: Security Advisory for moby-engine (FEDORA-2022-b027a13a39)
2022-09-16 00:00:00
Fedora: Security Advisory for containerd (FEDORA-2022-8298607490)
2022-09-16 00:00:00
Fedora: Security Advisory for moby-engine (FEDORA-2022-8298607490)
2022-09-16 00:00:00
ibm
ibm
alpinelinux
alpinelinux
CVE-2022-36109
2022-09-09 18:15:10
fedora
fedora
[SECURITY] Fedora 37 Update: moby-engine-20.10.18-1.fc37
2022-09-16 00:18:25
[SECURITY] Fedora 36 Update: moby-engine-20.10.18-1.fc36
2022-09-15 01:57:00
[SECURITY] Fedora 37 Update: containerd-1.6.8-2.fc37
2022-09-16 00:18:25
redhatcve
redhatcve
CVE-2022-36109
2022-09-15 21:14:14
github
github
prion
prion
Information disclosure
2022-09-09 18:15:00
cvelist
cvelist
debiancve
debiancve
CVE-2022-36109
2022-09-09 18:15:10
ubuntucve
ubuntucve
CVE-2022-36109
2022-09-09 00:00:00
nvd
nvd
CVE-2022-36109
2022-09-09 18:15:10
cve
cve
CVE-2022-36109
2022-09-09 18:15:10
mageia
mageia
Updated docker packages fix security vulnerability
2023-01-24 10:58:24
osv
osv
Moby supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions
2022-09-16 21:00:46
CVE-2023-25173
2023-02-16 15:15:20