VDB
RHSA-2022%3A1699
RHSA-2022%3A1699
PUBLISHED
CVSS 4.800000190734863 MEDIUM
A flaw was found in Moby (Docker Engine), where containers were started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs. Containers using Linux users and groups to perform privilege separation inside the container are most directly impacted.
Risk Scores
CVSS 3.1
4.800000190734863
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-sriov-infiniband-cni@sha256:75b9dbb7968455ae57c124ee4d6cd3f28795d9982f6151aa655f8682d5abda21_s390x as a component of Red Hat OpenShift Container Platform 4.7 | *, * |
| Red Hat | openshift4/kubernetes-nmstate-rhel8-operator@sha256:b83c47c071a07e4c3d7d1cf1a931d1be4b43d7f3030083b4df69ca9cf2e3d081_ppc64le as a component of Red Hat OpenShift Container Platform 4.7 | *, openshift4/kubernetes-nmstate-rhel8-operator@sha256:b83c47c071a07e4c3d7d1cf1a931d1be4b43d7f3030083b4df69ca9cf2e3d081_ppc64le |
| Red Hat | openshift4/ose-ghostunnel@sha256:168c106d6e50427936a3c2c2c5fbed84a504305f8b85d165b00c3d05ef4008e6_amd64 as a component of Red Hat OpenShift Container Platform 4.7 | *, openshift4/ose-ghostunnel@sha256:168c106d6e50427936a3c2c2c5fbed84a504305f8b85d165b00c3d05ef4008e6_amd64 |
| Red Hat | openshift4/ose-jenkins-agent-nodejs-10-rhel8@sha256:d7b8c2c9cf90bf27e33804c82555bf20cb5da8c88976974a82ec570ceac94162_ppc64le as a component of Red Hat OpenShift Container Platform 4.7 | *, * |
| Red Hat | openshift4/ose-local-storage-static-provisioner@sha256:34eea7fce7ceead02a9afc7d7895f13145303d3831efe856d1aba72e4a0769e5_ppc64le as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-local-storage-static-provisioner@sha256:34eea7fce7ceead02a9afc7d7895f13145303d3831efe856d1aba72e4a0769e5_ppc64le, * |
| Red Hat | openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:8a683602cad181cc672366e2dfc45e328c9a906387bc31ae413f1f42e04c20f9_ppc64le as a component of Red Hat OpenShift Container Platform 4.7 | *, openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:8a683602cad181cc672366e2dfc45e328c9a906387bc31ae413f1f42e04c20f9_ppc64le |
| Red Hat | openshift4/ptp-must-gather-rhel8@sha256:fcb440ce6c846fa5521a21efcb409b612957c3394c34817b5e7be6ef742c6e4f_s390x as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ptp-must-gather-rhel8@sha256:fcb440ce6c846fa5521a21efcb409b612957c3394c34817b5e7be6ef742c6e4f_s390x, * |
| Red Hat | openshift4/ose-cluster-kube-descheduler-operator@sha256:9ca5deac6d58d33d2565ba6bb06bc490224af5b3c4cd81052fc0aeda72ba1a07_amd64 as a component of Red Hat OpenShift Container Platform 4.7 | *, openshift4/ose-cluster-kube-descheduler-operator@sha256:9ca5deac6d58d33d2565ba6bb06bc490224af5b3c4cd81052fc0aeda72ba1a07_amd64 |
| Red Hat | openshift4/ose-metering-ansible-operator@sha256:0f7dff22f4170344851c503d25cf7f939336df98a26298026ca498fad0deb4ae_amd64 as a component of Red Hat OpenShift Container Platform 4.7 | *, openshift4/ose-metering-ansible-operator@sha256:0f7dff22f4170344851c503d25cf7f939336df98a26298026ca498fad0deb4ae_amd64 |
| Red Hat | openshift4/ose-node-feature-discovery@sha256:85175de46237657174fa39e16a54f5a23bafd32e1c758eceda3a3c391de97b32_ppc64le as a component of Red Hat OpenShift Container Platform 4.7 | *, openshift4/ose-node-feature-discovery@sha256:85175de46237657174fa39e16a54f5a23bafd32e1c758eceda3a3c391de97b32_ppc64le |
| Red Hat | openshift4/ptp-must-gather-rhel8@sha256:9e0e2575f5ff9d507a47bd2f5acea4981628adb8aa0dfcb91cd8e9c2d8cc1186_ppc64le as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ptp-must-gather-rhel8@sha256:9e0e2575f5ff9d507a47bd2f5acea4981628adb8aa0dfcb91cd8e9c2d8cc1186_ppc64le, * |
| Red Hat | openshift4/ose-jenkins-agent-nodejs-10-rhel8@sha256:d276e7187fb083896af3828185e8a4fcf06c63e94bbc8ccf5aac37cfbb898bd2_amd64 as a component of Red Hat OpenShift Container Platform 4.7 | *, * |
| Red Hat | openshift4/ose-local-storage-diskmaker@sha256:31f29169da5697680b95080a662a09635332005b9670120210af2e7083ea7257_s390x as a component of Red Hat OpenShift Container Platform 4.7 | *, openshift4/ose-local-storage-diskmaker@sha256:31f29169da5697680b95080a662a09635332005b9670120210af2e7083ea7257_s390x |
| Red Hat | openshift4/ose-local-storage-mustgather-rhel8@sha256:06fd5425e3d09d88c9e6119eb58b8009a2584a19be0f0154d56a8855b4954ae3_s390x as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-local-storage-mustgather-rhel8@sha256:06fd5425e3d09d88c9e6119eb58b8009a2584a19be0f0154d56a8855b4954ae3_s390x, * |
| Red Hat | openshift4/ose-cluster-capacity@sha256:e39b427e2ee37f6497095c564808babc70d7517748214afe2abdb50953384c2b_amd64 as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-cluster-capacity@sha256:e39b427e2ee37f6497095c564808babc70d7517748214afe2abdb50953384c2b_amd64, * |
| Red Hat | openshift4/ose-ansible-operator@sha256:0b891023c5df953f9d4cea4cb326b1032328f998f5769b4a5abbb05dada6200d_s390x as a component of Red Hat OpenShift Container Platform 4.7 | *, openshift4/ose-ansible-operator@sha256:0b891023c5df953f9d4cea4cb326b1032328f998f5769b4a5abbb05dada6200d_s390x |
| Red Hat | openshift4/ose-jenkins-agent-nodejs-10-rhel8@sha256:fcf2f8bffc34cc1075d17e36d85417ac587e3ec07a581691575cbe1585a309fd_s390x as a component of Red Hat OpenShift Container Platform 4.7 | *, openshift4/ose-jenkins-agent-nodejs-10-rhel8@sha256:fcf2f8bffc34cc1075d17e36d85417ac587e3ec07a581691575cbe1585a309fd_s390x |
| Red Hat | openshift4/ose-cluster-kube-descheduler-rhel8-operator@sha256:43e109c56ba9436835fdda1480245f02a5bd9862daa937af4bcf06cbe247efc6_ppc64le as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-cluster-kube-descheduler-rhel8-operator@sha256:43e109c56ba9436835fdda1480245f02a5bd9862daa937af4bcf06cbe247efc6_ppc64le, * |
| Red Hat | openshift4/ose-ansible-operator@sha256:39b304cc164d14d08e31f09f7df5f38785635c85c48c2654fca6ec0d2849dfdb_ppc64le as a component of Red Hat OpenShift Container Platform 4.7 | *, * |
| Red Hat | openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:c6a607bee4ca5fd53f4313a1fcd5f6520385fcbcf0195ec7f8646834964ca1e6_s390x as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:c6a607bee4ca5fd53f4313a1fcd5f6520385fcbcf0195ec7f8646834964ca1e6_s390x, * |
…and 100 more
Timeline
- May 12, 2022 CVE Published
- May 1, 2026 Distribution Patch
- May 1, 2026 Distribution Patch
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
- May 15, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2022:1699 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2066837 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2081642 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1699.json advisory
- https://access.redhat.com/security/cve/CVE-2022-24769 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-24769 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-24769 advisory
- https://github.com/moby/moby/security/advisories/GHSA-2mm7-x5h6-5pvq advisory