Published: 31/01/2023 Updated: 07/11/2023

A flaw was found in Moby. This flaw allows an malicious user to bypass primary group restrictions due to a flaw in the supplementary group access setup. (CVE-2022-36109) Docker version 20.10.15, build fd82621 is vulnerable to Insecure Permissions. Unauthorized users outside the Docker container can access any files within the Docker container. (CVE-2022-37708)

Debian Bug report logs - #1034886 dockerio: CVE-2022-37708 Package: src:dockerio; Maintainer for src:dockerio is Debian Go Packaging Team <team+pkg-go@trackerdebianorg>; Reported by: Moritz Mühlenhoff <jmm@inutilorg> Date: Wed, 26 Apr 2023 17:39:02 UTC Severity: important Tags: security, upstream Reply o ...

DescriptionThe MITRE CVE dictionary describes this issue as: Docker version 201015, build fd82621 is vulnerable to Insecure Permissions Unauthorized users outside the Docker container can access any files within the Docker container ...

A flaw was found in Moby This flaw allows an attacker to bypass primary group restrictions due to a flaw in the supplementary group access setup (CVE-2022-36109) Docker version 201015, build fd82621 is vulnerable to Insecure Permissions Unauthorized users outside the Docker container can access any files within the Docker container (CVE-2022- ...

Docker CVE-2022-37708

Docker Lightman Exploit Docker CVE-2022-37708 This exploit relies on how the UNIX filesystem has UID and GID on files that Docker shares between the Host running the Docker and the Client being run within the Docker as well as relies on the nature of how Process ID ownership works The Problem in a nutshell Docker directly maps the IDs from the shares within the Client to a

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1034886 https://nvd.nist.gov https://github.com/thekevinday/docker_lightman_exploit https://access.redhat.com/security/cve/cve-2022-37708 https://alas.aws.amazon.com/AL2/ALASDOCKER-2023-024.html

CVE-2022-37708

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect