VDB
CVE-2022-27651
CVE-2022-27651
PUBLISHED
CVSS 6.800000190734863 MEDIUM
Incorrect Default Permissions
EPSS 1.26% · 69.2th percentile
Risk Scores
CVSS 3.1
6.800000190734863
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
EPSS Score
1.26%
69.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | buildah | Affects buildah v1.24.0 and prior, Fixed in - v1.25.0, Affects buildah v1.24.0 and prior, Fixed in - v1.25.0, * |
| github.com | containers/buildah | 0, 0, 0 |
| chainguard | buildah | *, *, * |
| github.com | containers/buildah/chroot | 0, 0, 0 |
| wolfi | buildah | *, *, * |
| alpine | buildah | 0 |
Timeline
- Apr 1, 2022 CVE Published
- Apr 5, 2022 EPSS Score
- May 26, 2022 EPSS Score
- Jul 18, 2022 EPSS Score
- Sep 7, 2022 EPSS Score
- Dec 19, 2022 EPSS Score
- Dec 30, 2022 EPSS Score
- Feb 8, 2023 EPSS Score
- Feb 23, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 31, 2023 EPSS Score
- May 21, 2023 EPSS Score
References
- FEDORA-2022-224a93852c vendor-advisory
- FEDORA-2022-e6388650ea vendor-advisory
- FEDORA-2022-1a15fe81f0 vendor-advisory
- https://github.com/containers/buildah/security/advisories/GHSA-c3g4-w6cv-6v7h url
- https://github.com/containers/buildah/pull/3855 patch
- https://github.com/containers/buildah/commit/90b3254c7404039c1c786999ac189654228f6e0e patch
- https://github.com/containers/buildah/commit/e7e55c988c05dd74005184ceb64f097a0cfe645b patch
- https://nvd.nist.gov/vuln/detail/CVE-2022-27651 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2066840 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2VWH6X6HOFPO6HTESF42HIJZEPXSWVIO/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7NETC7I6RTMMBRJJQVJOJUPDK4W4PQSJ/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/25YI27MENCEPZTTGRVU6BQD5V53FNI52/ url
- https://pkg.go.dev/vuln/GO-2022-0417 url
- https://github.com/advisories/GHSA-c3g4-w6cv-6v7h advisory