GO-2022-0417
Incorrect default permissions in github.com/containers/buildah
At a glance
- Published
- Updated
- CVE
- CVE-2022-27651
- Aliases
- GHSA-c3g4-w6cv-6v7h
Description
Containers are created with non-empty inheritable Linux process capabilities, permitting programs with inheritable file capabilities to elevate those capabilities to the permitted set during execve(2). This bug does not affect the container security sandbox, as the inheritable set never contains more capabilities than are included in the container's bounding set.
Affected packages
| Package | Versions |
|---|---|
| Go · github.com/containers/buildah | introduced 0, fixed 1.25.0 |
References
- https://github.com/containers/buildah/commit/e7e55c988c05dd74005184ceb64f097a0cfe645b FIX
- https://bugzilla.redhat.com/show_bug.cgi?id=2066840 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |