High severity · published Apr 4, 2022
CVE-2022-27650
A flaw was found in crun where containers were incorrectly started with non-empty default permissions
7.5
CVSS
1.2%
EPSS
No
On KEV
Description
A flaw was found in crun where containers were incorrectly started with non-empty default permissions. A vulnerability was found in Moby (Docker Engine) where containers were started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CR
Crun · Crun Project
before 1.4.4 · source: NVD
EL
Enterprise Linux · Redhat
8.0 · source: NVD
FE
Fedora · Fedoraproject
34 · source: NVD
OC
Openshift Container Platform · Redhat
4.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-27650
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-27650
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=2066845
Patch
https://github.com/containers/crun/commit/1aeeed2e4fdeffb4875c0d0b439915894594c8c6
Third Party Advisory
https://github.com/containers/crun/security/advisories/GHSA-wr4f-w546-m398
lists.fedoraproject.org
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYIGABCZ7ZHAG2XCOGITTQRJU2ASWMFA/
More from Crun
8.6
CVE-2019-18837
An issue was discovered in crun before 0.10.5
7.8
CVE-2026-30892
Crun incorrectly parses `crun exec` option `-u`, leading to privilege escalation