VDB
RHSA-2022%3A1357
RHSA-2022%3A1357
PUBLISHED
CVSS 4.800000190734863 MEDIUM
A flaw was found in Moby (Docker Engine), where containers were started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs. Containers using Linux users and groups to perform privilege separation inside the container are most directly impacted.
Risk Scores
CVSS 3.1
4.800000190734863
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-egress-dns-proxy@sha256:45dec9533727b632e4703c8280800dd37974883ace14727b8297cb81802f4620_amd64 as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-egress-dns-proxy@sha256:45dec9533727b632e4703c8280800dd37974883ace14727b8297cb81802f4620_amd64, * |
| Red Hat | openshift4/kubernetes-nmstate-rhel8-operator@sha256:50ee017d22a377c2aefd33428c723bcb352bde2bc997572a2cb73ad24b583c53_amd64 as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/kubernetes-nmstate-rhel8-operator@sha256:50ee017d22a377c2aefd33428c723bcb352bde2bc997572a2cb73ad24b583c53_amd64, * |
| Red Hat | openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:b60bc824b7ab59d02e2dff5daf7846a589d02974a314b5416187be47d77cd4a0_arm64 as a component of Red Hat OpenShift Container Platform 4.10 | *, openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:b60bc824b7ab59d02e2dff5daf7846a589d02974a314b5416187be47d77cd4a0_arm64 |
| Red Hat | openshift4/ose-cluster-kube-descheduler-rhel8-operator@sha256:3b8154b8a6fb4ebd5b7e621af4b1a6e376a22693eacbcf89a7fa449ec4d98669_amd64 as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-cluster-kube-descheduler-rhel8-operator@sha256:3b8154b8a6fb4ebd5b7e621af4b1a6e376a22693eacbcf89a7fa449ec4d98669_amd64, * |
| Red Hat | openshift4/cloud-event-proxy-rhel8@sha256:208167d0dfc1e9f38cbf27b605079790395775094926c1482c0a346e6524963e_arm64 as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/cloud-event-proxy-rhel8@sha256:208167d0dfc1e9f38cbf27b605079790395775094926c1482c0a346e6524963e_arm64, * |
| Red Hat | openshift4/ose-sriov-network-device-plugin@sha256:422047b45539a6c530e1d0f70d14974eac4364c8ecfb7a11258e1e9e34f9df9f_arm64 as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-sriov-network-device-plugin@sha256:422047b45539a6c530e1d0f70d14974eac4364c8ecfb7a11258e1e9e34f9df9f_arm64, * |
| Red Hat | openshift4/ose-clusterresourceoverride-rhel8@sha256:ce124b9d94658ee8f1d016612e7ab319e22fc91c5473a79a2f5622e87e5d01c2_arm64 as a component of Red Hat OpenShift Container Platform 4.10 | *, openshift4/ose-clusterresourceoverride-rhel8@sha256:ce124b9d94658ee8f1d016612e7ab319e22fc91c5473a79a2f5622e87e5d01c2_arm64 |
| Red Hat | openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:4655bbad3e67eac9b066524fb557a7cef8bfb2e71cce88e8eb0fb0a7f785e4a4_ppc64le as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:4655bbad3e67eac9b066524fb557a7cef8bfb2e71cce88e8eb0fb0a7f785e4a4_ppc64le, * |
| Red Hat | openshift4/ose-cluster-capacity@sha256:a920ca7c5597d74a0fe0f9ac70c3fb2e9d3459f209f86fab50cbe88b68a5e15e_s390x as a component of Red Hat OpenShift Container Platform 4.10 | *, * |
| Red Hat | openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:82d154cdada01e40996720d736aae7decbe556cb48e207cc8d7408908c7cae8f_ppc64le as a component of Red Hat OpenShift Container Platform 4.10 | *, openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:82d154cdada01e40996720d736aae7decbe556cb48e207cc8d7408908c7cae8f_ppc64le |
| Red Hat | openshift4/metallb-rhel8@sha256:9c1acfcca77349fb688b6fa7445f639dacfba244fb6bbe56fc0abca2b520d7aa_arm64 as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/metallb-rhel8@sha256:9c1acfcca77349fb688b6fa7445f639dacfba244fb6bbe56fc0abca2b520d7aa_arm64, * |
| Red Hat | openshift4/ose-sriov-infiniband-cni@sha256:47fb4cc6206a8391124ce96f7021ccd63794f401f61f3a20230c7b837c09f81a_s390x as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-sriov-infiniband-cni@sha256:47fb4cc6206a8391124ce96f7021ccd63794f401f61f3a20230c7b837c09f81a_s390x, * |
| Red Hat | openshift4/ose-helm-operator@sha256:f2801607443c1a704959b8bd4cb2ef3fb36d327d136324a80b272dc5bf3487d4_s390x as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-helm-operator@sha256:f2801607443c1a704959b8bd4cb2ef3fb36d327d136324a80b272dc5bf3487d4_s390x, * |
| Red Hat | openshift4/ptp-must-gather-rhel8@sha256:86ac0c485f13557c315f2f40a7ba69e221676132f8656cf6b7919213f4639652_s390x as a component of Red Hat OpenShift Container Platform 4.10 | *, * |
| Red Hat | openshift4/ose-cluster-kube-descheduler-rhel8-operator@sha256:033242c063aa8981726d8b30e853722178e0e058cb23c82e0e8b835b926f60f7_ppc64le as a component of Red Hat OpenShift Container Platform 4.10 | *, openshift4/ose-cluster-kube-descheduler-rhel8-operator@sha256:033242c063aa8981726d8b30e853722178e0e058cb23c82e0e8b835b926f60f7_ppc64le |
| Red Hat | openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:86f7908249d804b91fec5f3bebde946c478a25a502ae01f6819b43c65f9afda8_amd64 as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:86f7908249d804b91fec5f3bebde946c478a25a502ae01f6819b43c65f9afda8_amd64, * |
| Red Hat | openshift4/ose-sriov-dp-admission-controller@sha256:78532ca666cb402d99c4a5736ec80c4985beb4e229facbb8305cbf30f2b422b7_ppc64le as a component of Red Hat OpenShift Container Platform 4.10 | openshift4/ose-sriov-dp-admission-controller@sha256:78532ca666cb402d99c4a5736ec80c4985beb4e229facbb8305cbf30f2b422b7_ppc64le, * |
| Red Hat | openshift4/frr-rhel8@sha256:8649886db750601b201001815155db2b3de25abb28e12dc29a38c652b9eb9d95_amd64 as a component of Red Hat OpenShift Container Platform 4.10 | *, openshift4/frr-rhel8@sha256:8649886db750601b201001815155db2b3de25abb28e12dc29a38c652b9eb9d95_amd64 |
| Red Hat | openshift4/ose-node-feature-discovery@sha256:47a8d804eda35017f396a4ba775a2ee905c016b1d91157c13f0b26d8c1ac060d_s390x as a component of Red Hat OpenShift Container Platform 4.10 | *, openshift4/ose-node-feature-discovery@sha256:47a8d804eda35017f396a4ba775a2ee905c016b1d91157c13f0b26d8c1ac060d_s390x |
| Red Hat | openshift4/ose-cluster-capacity@sha256:20551a1c4cac5057f33a5fd72593ec58c20274a981c3aedb2ea5c66f432850f1_ppc64le as a component of Red Hat OpenShift Container Platform 4.10 | *, * |
…and 158 more
Timeline
- Apr 20, 2022 CVE Published
- May 1, 2026 Distribution Patch
- May 1, 2026 Distribution Patch
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
- May 15, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2022:1357 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2066837 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2074898 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1357.json advisory
- https://access.redhat.com/security/cve/CVE-2022-24769 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-24769 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-24769 advisory
- https://github.com/moby/moby/security/advisories/GHSA-2mm7-x5h6-5pvq advisory