CVE-2022-27651

Name of the Vulnerable Software and Affected Versions Buildah (affected versions not specified) Moby (Docker Engine) (affected versions not specified)

Description A flaw was found in buildah and Moby (Docker Engine) where containers were incorrectly started with non-empty default permissions and non-empty inheritable Linux process capabilities. This enables an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs, potentially impacting confidentiality and integrity. The bug does not affect the container security sandbox, as the inheritable set never contains more capabilities than are included in the container's bounding set.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.