Sploitus

CVE-2022-27651

No indexed exploits for CVE-2022-27651 yet

A flaw was found in buildah where containers were incorrectly started with non-empty default permissions. A bug was found in Moby (Docker Engine) where containers were incorrectly started with non-empty inheritable Linux process capabilities, enabling an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs. This has the potential to impact confidentiality and integrity.

Affected products
Alt Linux, Almalinux, Centos, Debian, Moby, Red Hat, Rocky Linux, Suse
Buildah Project Buildah
< 1.25.0
CVSS 3.1
6.8 MEDIUM
EPSS
1.2% (66th percentile)
Weakness
CWE-276
NVD status
Modified
Published
2022-04-04
CVE-2022-27651 at NVD
Authoritative description, scoring and affected products

No indexed exploits for CVE-2022-27651 yet

Our index is partial: it proves presence, never absence

No exploit for CVE-2022-27651 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.