CVE-2022-1227: fedoraproject fedora Improper Preservation of Permissions

Modified

AliasesRHSA-2022:2143RHSA-2022:2190RHSA-2022:2263+6 more

Published 29-04-2022Last modified 02-08-2024

Vulnerability summary

CVE-2022-1227 is a high (CVSS 8.8) Improper Preservation of Permissions vulnerability in fedoraproject fedora. EPSS estimates a 4.17% chance of exploitation in the next 30 days, higher than 90.9% of scored vulnerabilities. 1 public exploit is recorded.

Priority

Prioritisepublic exploit

Public exploit (GitHub, Date unknown)

Source freshness unavailable

How is this decided?

CVSS score

8.8/10

010

High · v3.1 (NVD)

EPSS score

4.17%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits1github

Advisory lineage

Upstream 0 · Downstream 8 · Related 4

MGASA-2023-0213 OPENSUSE-SU-2024:12400-1 RHSA-2022:1762 RHSA-2022:4651 RHSA-2022:4816 SUSE-SU-2022:2834-1+2 more

Timeline

29-04-2022
PublishedVulnerability first disclosed.
02-08-2024
Last modifiedVulnerability information updated.

Description

A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem, leading to information disclosure or denial of service.

CVSS metrics

8 scores · 6 sources · 3 versions

v4.08.7v3.18.8v2.06.8

EPSS trend

Probability

4.17%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

No change 0.00 pp

From 4.17% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

githubUnverified
Podman
Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: network-reachable, no authentication, user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat71 products

developer_tools1.0
enterprise_linuxEOL7.0 | 8.0
enterprise_linux_eus8.6
enterprise_linux_for_ibm_z_systems7.0 | 8.6
enterprise_linux_for_power_little_endian7.0 | 8.6

enterprise_linux_server7.0
enterprise_linux_server_aus8.6
enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions8.6
enterprise_linux_server_tus8.6
enterprise_linux_server_update_services_for_sap_solutions8.6
enterprise_linux_workstation7.0
openshift_container_platform4.0
quay3.0.0
buildah< 0:1.19.9-3.module+el8.6.0+14874+64436299 | < 0:1.21.4-3.module+el8.4.0+15741+47bb6bfe
buildah-debuginfo< 0:1.19.9-3.module+el8.6.0+14874+64436299 | < 0:1.21.4-3.module+el8.4.0+15741+47bb6bfe
buildah-debugsource< 0:1.19.9-3.module+el8.6.0+14874+64436299 | < 0:1.21.4-3.module+el8.4.0+15741+47bb6bfe
buildah-tests< 0:1.19.9-3.module+el8.6.0+14874+64436299 | < 0:1.21.4-3.module+el8.4.0+15741+47bb6bfe
buildah-tests-debuginfo< 0:1.19.9-3.module+el8.6.0+14874+64436299 | < 0:1.21.4-3.module+el8.4.0+15741+47bb6bfe
cockpit-podman< 0:29-2.module+el8.6.0+14874+64436299 | < 0:32-2.module+el8.4.0+14908+81312c48
conmon< 2:2.0.26-1.module+el8.6.0+14874+64436299 | < 2:2.0.29-1.module+el8.4.0+14908+81312c48
conmon-debuginfo< 2:2.0.26-1.module+el8.6.0+14874+64436299 | < 2:2.0.29-1.module+el8.4.0+14908+81312c48
conmon-debugsource< 2:2.0.26-1.module+el8.6.0+14874+64436299 | < 2:2.0.29-1.module+el8.4.0+14908+81312c48
container-selinux< 2:2.178.0-2.module+el8.6.0+14874+64436299 | < 2:2.167.0-1.module+el8.4.0+14908+81312c48
containernetworking-plugins< 0:0.9.1-1.module+el8.6.0+14874+64436299 | < 0:0.9.1-1.module+el8.4.0+14908+81312c48
containernetworking-plugins-debuginfo< 0:0.9.1-1.module+el8.6.0+14874+64436299 | < 0:0.9.1-1.module+el8.4.0+14908+81312c48
containernetworking-plugins-debugsource< 0:0.9.1-1.module+el8.6.0+14874+64436299 | < 0:0.9.1-1.module+el8.4.0+14908+81312c48
containers-common< 1:1.2.4-1.module+el8.6.0+14874+64436299 | < 1:1.3.1-7.module+el8.4.0+15741+47bb6bfe
crit< 0:3.15-1.module+el8.6.0+14874+64436299 | < 0:3.15-1.module+el8.4.0+14908+81312c48
criu< 0:3.15-1.module+el8.6.0+14874+64436299 | < 0:3.15-1.module+el8.4.0+14908+81312c48
criu-debuginfo< 0:3.15-1.module+el8.6.0+14874+64436299 | < 0:3.15-1.module+el8.4.0+14908+81312c48
criu-debugsource< 0:3.15-1.module+el8.6.0+14874+64436299 | < 0:3.15-1.module+el8.4.0+14908+81312c48
crun< 0:0.18-3.module+el8.6.0+14874+64436299 | < 0:0.20.1-1.module+el8.4.0+14908+81312c48
crun-debuginfo< 0:0.18-3.module+el8.6.0+14874+64436299 | < 0:0.20.1-1.module+el8.4.0+14908+81312c48
crun-debugsource< 0:0.18-3.module+el8.6.0+14874+64436299 | < 0:0.20.1-1.module+el8.4.0+14908+81312c48
fuse-overlayfs< 0:1.4.0-2.module+el8.6.0+14874+64436299 | < 0:1.6-1.module+el8.4.0+14908+81312c48
fuse-overlayfs-debuginfo< 0:1.4.0-2.module+el8.6.0+14874+64436299 | < 0:1.6-1.module+el8.4.0+14908+81312c48
fuse-overlayfs-debugsource< 0:1.4.0-2.module+el8.6.0+14874+64436299 | < 0:1.6-1.module+el8.4.0+14908+81312c48
libslirp< 0:4.3.1-1.module+el8.6.0+14874+64436299 | < 0:4.3.1-1.module+el8.4.0+14908+81312c48
libslirp-debuginfo< 0:4.3.1-1.module+el8.6.0+14874+64436299 | < 0:4.3.1-1.module+el8.4.0+14908+81312c48
libslirp-debugsource< 0:4.3.1-1.module+el8.6.0+14874+64436299 | < 0:4.3.1-1.module+el8.4.0+14908+81312c48
libslirp-devel< 0:4.3.1-1.module+el8.6.0+14874+64436299 | < 0:4.3.1-1.module+el8.4.0+14908+81312c48
oci-seccomp-bpf-hook< 0:1.2.0-3.module+el8.6.0+14874+64436299 | < 0:1.2.3-2.module+el8.4.0+14908+81312c48
oci-seccomp-bpf-hook-debuginfo< 0:1.2.0-3.module+el8.6.0+14874+64436299 | < 0:1.2.3-2.module+el8.4.0+14908+81312c48
oci-seccomp-bpf-hook-debugsource< 0:1.2.0-3.module+el8.6.0+14874+64436299 | < 0:1.2.3-2.module+el8.4.0+14908+81312c48
podman< 0:3.0.1-9.module+el8.6.0+14874+64436299 | < 0:1.6.4-32.el7_9 | < 0:1.9.3-5.rhaos4.6.el8 | < 0:3.2.3-0.12.module+el8.4.0+14908+81312c48
podman-catatonit< 0:3.0.1-9.module+el8.6.0+14874+64436299 | < 0:3.2.3-0.12.module+el8.4.0+14908+81312c48
podman-catatonit-debuginfo< 0:3.0.1-9.module+el8.6.0+14874+64436299 | < 0:3.2.3-0.12.module+el8.4.0+14908+81312c48
podman-debuginfo< 0:3.0.1-9.module+el8.6.0+14874+64436299 | < 0:1.6.4-32.el7_9 | < 0:1.9.3-5.rhaos4.6.el8 | < 0:3.2.3-0.12.module+el8.4.0+14908+81312c48
podman-debugsource< 0:3.0.1-9.module+el8.6.0+14874+64436299 | < 0:1.9.3-5.rhaos4.6.el8 | < 0:3.2.3-0.12.module+el8.4.0+14908+81312c48
podman-docker< 0:3.0.1-9.module+el8.6.0+14874+64436299 | < 0:1.6.4-32.el7_9 | < 0:1.9.3-5.rhaos4.6.el8 | < 0:3.2.3-0.12.module+el8.4.0+14908+81312c48
podman-plugins< 0:3.0.1-9.module+el8.6.0+14874+64436299 | < 0:3.2.3-0.12.module+el8.4.0+14908+81312c48
podman-plugins-debuginfo< 0:3.0.1-9.module+el8.6.0+14874+64436299 | < 0:3.2.3-0.12.module+el8.4.0+14908+81312c48
podman-remote< 0:3.0.1-9.module+el8.6.0+14874+64436299 | < 0:1.9.3-5.rhaos4.6.el8 | < 0:3.2.3-0.12.module+el8.4.0+14908+81312c48
podman-remote-debuginfo< 0:3.0.1-9.module+el8.6.0+14874+64436299 | < 0:1.9.3-5.rhaos4.6.el8 | < 0:3.2.3-0.12.module+el8.4.0+14908+81312c48
podman-tests< 0:3.0.1-9.module+el8.6.0+14874+64436299 | < 0:1.9.3-5.rhaos4.6.el8 | < 0:3.2.3-0.12.module+el8.4.0+14908+81312c48
python3-criu< 0:3.15-1.module+el8.6.0+14874+64436299 | < 0:3.15-1.module+el8.4.0+14908+81312c48
runc< 0:1.0.0-73.rc95.module+el8.6.0+14874+64436299 | < 0:1.0.0-74.rc95.module+el8.4.0+14908+81312c48
runc-debuginfo< 0:1.0.0-73.rc95.module+el8.6.0+14874+64436299 | < 0:1.0.0-74.rc95.module+el8.4.0+14908+81312c48
runc-debugsource< 0:1.0.0-73.rc95.module+el8.6.0+14874+64436299 | < 0:1.0.0-74.rc95.module+el8.4.0+14908+81312c48
skopeo< 1:1.2.4-1.module+el8.6.0+14874+64436299 | < 1:1.3.1-7.module+el8.4.0+15741+47bb6bfe
skopeo-debuginfo< 1:1.2.4-1.module+el8.6.0+14874+64436299 | < 1:1.3.1-7.module+el8.4.0+15741+47bb6bfe
skopeo-debugsource< 1:1.2.4-1.module+el8.6.0+14874+64436299 | < 1:1.3.1-7.module+el8.4.0+15741+47bb6bfe
skopeo-tests< 1:1.2.4-1.module+el8.6.0+14874+64436299 | < 1:1.3.1-7.module+el8.4.0+15741+47bb6bfe
slirp4netns< 0:1.1.8-1.module+el8.6.0+14874+64436299 | < 0:1.1.8-1.module+el8.4.0+14908+81312c48
slirp4netns-debuginfo< 0:1.1.8-1.module+el8.6.0+14874+64436299 | < 0:1.1.8-1.module+el8.4.0+14908+81312c48
slirp4netns-debugsource< 0:1.1.8-1.module+el8.6.0+14874+64436299 | < 0:1.1.8-1.module+el8.4.0+14908+81312c48
toolbox< 0:0.0.99.3-1.module+el8.6.0+14874+64436299 | < 0:0.0.8-1.module+el8.4.0+14908+81312c48
toolbox-debuginfo< 0:0.0.99.3-1.module+el8.6.0+14874+64436299
toolbox-debugsource< 0:0.0.99.3-1.module+el8.6.0+14874+64436299
toolbox-tests< 0:0.0.99.3-1.module+el8.6.0+14874+64436299
udica< 0:0.2.4-1.module+el8.6.0+14874+64436299 | < 0:0.2.4-2.module+el8.4.0+14908+81312c48

Show all 71

Debian2 products

golang-github-containers-psgo< 1.7.1+ds1-1
libpod< 3.4.7+ds1-1

Alpine1 product

podman< 3.4.7-r0

Fedoraproject1 product

fedoraEOL34 | 35

Github.com/containers1 product

psgo< 1.7.2

Github.com/containers/podman1 product

v3< 3.4

Podman_project1 product

podman< 4.0.0

Psgo_project1 product

psgo< 1.7.2

Ubuntu1 product

golang-github-containers-psgoAll versions (No fix recorded)

9 vendors · 80 products

References

29 links

bugzilla.redhat.com/show_bug.cgi?id=2070368REPORTWEBIssue TrackingThird Party Advisory
github.com/containers/podman/issues/10941ARTICLEWEBExploitIssue TrackingThird Party Advisory
lists.fedoraproject.org/archives/…Vendor Advisory
security.netapp.com/advisory/ntap-20240628-0001/
access.redhat.com/errata/RHSA-2022:2143Advisory
access.redhat.com/security/updates/classification/ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_2143.jsonAdvisory
access.redhat.com/security/cve/CVE-2022-1227REPORT
www.cve.org/CVERecord?id=CVE-2022-1227AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2022-1227AdvisoryOval

Show all 29 references