CVE-2022-2989
Summary
| CVE | CVE-2022-2989 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2022-09-13 14:15:00 UTC |
|---|
| Updated | 2023-02-12 22:15:00 UTC |
|---|
| Description | An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| Vulnerability in Linux containers – investigation and mitigation – Bentham’s Gaze |
MISC |
www.benthamsgaze.org |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| 2121445 – (CVE-2022-2989) CVE-2022-2989 podman: possible information disclosure and modification |
MISC |
bugzilla.redhat.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 160285 Oracle Enterprise Linux Security Update for buildah (ELSA-2022-8008)
- 160318 Oracle Enterprise Linux Security Update for container-tools:ol8 (ELSA-2022-7822)
- 160323 Oracle Enterprise Linux Security Update for podman (ELSA-2022-8431)
- 160696 Oracle Enterprise Linux Security Update for container-tools:4.0 (ELSA-2023-2802)
- 182066 Debian Security Update for libpod (CVE-2022-2989)
- 199663 Ubuntu Security Notification for Podman Vulnerability (USN-6295-1)
- 240848 Red Hat Update for container-tools:rhel8 security (RHSA-2022:7822)
- 240894 Red Hat Update for buildah (RHSA-2022:8008)
- 240912 Red Hat Update for podman security (RHSA-2022:8431)
- 241486 Red Hat Update for container-tools:4.0 (RHSA-2023:2802)
- 379641 Alibaba Cloud Linux Security Update for container-tools:rhel8 (ALINUX3-SA-2024:0050)
- 502914 Alpine Linux Security Update for podman
- 505793 Alpine Linux Security Update for podman
- 753196 SUSE Enterprise Linux Security Update for podman (SUSE-SU-2022:3819-1)
- 753482 SUSE Enterprise Linux Security Update for podman (SUSE-SU-2022:3820-1)
- 753592 SUSE Enterprise Linux Security Update for podman (SUSE-SU-2023:0187-1)
- 753659 SUSE Enterprise Linux Security Update for podman (SUSE-SU-2023:0326-1)
- 903958 Common Base Linux Mariner (CBL-Mariner) Security Update for podman (10964)
- 904613 Common Base Linux Mariner (CBL-Mariner) Security Update for podman (11521)
- 906919 Common Base Linux Mariner (CBL-Mariner) Security Update for podman (10964-1)
- 940780 AlmaLinux Security Update for container-tools:rhel8 (ALSA-2022:7822)
- 940785 AlmaLinux Security Update for podman (ALSA-2022:8431)
- 940827 AlmaLinux Security Update for buildah (ALSA-2022:8008)
- 941090 AlmaLinux Security Update for container-tools:4.0 (ALSA-2023:2802)
- 960180 Rocky Linux Security Update for container-tools:rhel8 (RLSA-2022:7822)
