Medium severity · published Apr 4, 2022
CVE-2022-27651
A flaw was found in buildah where containers were incorrectly started with non-empty default permissions
6.8
CVSS
1.3%
EPSS
No
On KEV
Description
A flaw was found in buildah where containers were incorrectly started with non-empty default permissions. A bug was found in Moby (Docker Engine) where containers were incorrectly started with non-empty inheritable Linux process capabilities, enabling an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs. This has the potential to impact confidentiality and integrity.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack vector
Network
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BU
Buildah · Buildah Project
before 1.25.0 · source: NVD
EL
Enterprise Linux · Redhat
7.0; 8.0 · source: NVD
FE
Fedora · Fedoraproject
34; 35; 36 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-27651
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-27651
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=2066840
Patch
https://github.com/containers/buildah/commit/e7e55c988c05dd74005184ceb64f097a0cfe645b
Third Party Advisory
https://github.com/containers/buildah/security/advisories/GHSA-c3g4-w6cv-6v7h
lists.fedoraproject.org
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/25YI27MENCEPZTTGRVU6BQD5V53FNI52/
lists.fedoraproject.org
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2VWH6X6HOFPO6HTESF42HIJZEPXSWVIO/
lists.fedoraproject.org
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7NETC7I6RTMMBRJJQVJOJUPDK4W4PQSJ/
More from Buildah
8.8
CVE-2020-10696
A path traversal flaw was found in Buildah in versions before 1.14.5
7.1
CVE-2022-2990
An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker…
5.9
CVE-2019-10214
The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift Container Platform, does not…
5.5
CVE-2021-3602
An information disclosure flaw was found in Buildah, when building containers using chroot isolation
4.4
CVE-2024-9675
A vulnerability was found in Buildah