RHSA-2022:7529: buildah Red Hat

CVSS: 7.5v3.1HighPublished

Published 21-10-2024Last modified 20-10-2026

Open JSON

Vulnerability summary

RHSA-2022:7529 is a high (CVSS 7.5) vulnerability in buildah Red Hat.

Overall risk

30/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v3.1 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 10 · Downstream 0

CVE-2022-1705 CVE-2022-1708 CVE-2022-1962 CVE-2022-21698 CVE-2022-28131 CVE-2022-30630+4 more

Timeline

21-10-2024
PublishedVulnerability first disclosed.
20-10-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: container-tools:3.0 security update

CVSS metrics

1 score · 1 source · 1 version

v3.17.5

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat58 products

buildah< 0:1.19.9-6.module+el8.7.0+16212+65e1b35f
buildah-debuginfo< 0:1.19.9-6.module+el8.7.0+16212+65e1b35f
buildah-debugsource< 0:1.19.9-6.module+el8.7.0+16212+65e1b35f
buildah-tests< 0:1.19.9-6.module+el8.7.0+16212+65e1b35f
buildah-tests-debuginfo< 0:1.19.9-6.module+el8.7.0+16212+65e1b35f

cockpit-podman< 0:29-2.module+el8.7.0+16212+65e1b35f
conmon< 2:2.0.26-3.module+el8.7.0+16212+65e1b35f
conmon-debuginfo< 2:2.0.26-3.module+el8.7.0+16212+65e1b35f
conmon-debugsource< 2:2.0.26-3.module+el8.7.0+16212+65e1b35f
container-selinux< 2:2.189.0-1.module+el8.7.0+16212+65e1b35f
containernetworking-plugins< 0:0.9.1-1.module+el8.7.0+16212+65e1b35f
containernetworking-plugins-debuginfo< 0:0.9.1-1.module+el8.7.0+16212+65e1b35f
containernetworking-plugins-debugsource< 0:0.9.1-1.module+el8.7.0+16212+65e1b35f
containers-common< 1:1.2.4-2.module+el8.7.0+16212+65e1b35f
crit< 0:3.15-1.module+el8.7.0+16212+65e1b35f
criu< 0:3.15-1.module+el8.7.0+16212+65e1b35f
criu-debuginfo< 0:3.15-1.module+el8.7.0+16212+65e1b35f
criu-debugsource< 0:3.15-1.module+el8.7.0+16212+65e1b35f
crun< 0:0.18-3.module+el8.7.0+16212+65e1b35f
crun-debuginfo< 0:0.18-3.module+el8.7.0+16212+65e1b35f
crun-debugsource< 0:0.18-3.module+el8.7.0+16212+65e1b35f
fuse-overlayfs< 0:1.4.0-2.module+el8.7.0+16212+65e1b35f
fuse-overlayfs-debuginfo< 0:1.4.0-2.module+el8.7.0+16212+65e1b35f
fuse-overlayfs-debugsource< 0:1.4.0-2.module+el8.7.0+16212+65e1b35f
libslirp< 0:4.3.1-1.module+el8.7.0+16212+65e1b35f
libslirp-debuginfo< 0:4.3.1-1.module+el8.7.0+16212+65e1b35f
libslirp-debugsource< 0:4.3.1-1.module+el8.7.0+16212+65e1b35f
libslirp-devel< 0:4.3.1-1.module+el8.7.0+16212+65e1b35f
oci-seccomp-bpf-hook< 0:1.2.0-3.module+el8.7.0+16212+65e1b35f
oci-seccomp-bpf-hook-debuginfo< 0:1.2.0-3.module+el8.7.0+16212+65e1b35f
oci-seccomp-bpf-hook-debugsource< 0:1.2.0-3.module+el8.7.0+16212+65e1b35f
podman< 0:3.0.1-13.module+el8.7.0+16212+65e1b35f
podman-catatonit< 0:3.0.1-13.module+el8.7.0+16212+65e1b35f
podman-catatonit-debuginfo< 0:3.0.1-13.module+el8.7.0+16212+65e1b35f
podman-debuginfo< 0:3.0.1-13.module+el8.7.0+16212+65e1b35f
podman-debugsource< 0:3.0.1-13.module+el8.7.0+16212+65e1b35f
podman-docker< 0:3.0.1-13.module+el8.7.0+16212+65e1b35f
podman-plugins< 0:3.0.1-13.module+el8.7.0+16212+65e1b35f
podman-plugins-debuginfo< 0:3.0.1-13.module+el8.7.0+16212+65e1b35f
podman-remote< 0:3.0.1-13.module+el8.7.0+16212+65e1b35f
podman-remote-debuginfo< 0:3.0.1-13.module+el8.7.0+16212+65e1b35f
podman-tests< 0:3.0.1-13.module+el8.7.0+16212+65e1b35f
python3-criu< 0:3.15-1.module+el8.7.0+16212+65e1b35f
runc< 0:1.0.0-73.rc95.module+el8.7.0+16212+65e1b35f
runc-debuginfo< 0:1.0.0-73.rc95.module+el8.7.0+16212+65e1b35f
runc-debugsource< 0:1.0.0-73.rc95.module+el8.7.0+16212+65e1b35f
skopeo< 1:1.2.4-2.module+el8.7.0+16212+65e1b35f
skopeo-debuginfo< 1:1.2.4-2.module+el8.7.0+16212+65e1b35f
skopeo-debugsource< 1:1.2.4-2.module+el8.7.0+16212+65e1b35f
skopeo-tests< 1:1.2.4-2.module+el8.7.0+16212+65e1b35f
slirp4netns< 0:1.1.8-1.module+el8.7.0+16212+65e1b35f
slirp4netns-debuginfo< 0:1.1.8-1.module+el8.7.0+16212+65e1b35f
slirp4netns-debugsource< 0:1.1.8-1.module+el8.7.0+16212+65e1b35f
toolbox< 0:0.0.99.3-1.module+el8.7.0+16212+65e1b35f
toolbox-debuginfo< 0:0.0.99.3-1.module+el8.7.0+16212+65e1b35f
toolbox-debugsource< 0:0.0.99.3-1.module+el8.7.0+16212+65e1b35f
toolbox-tests< 0:0.0.99.3-1.module+el8.7.0+16212+65e1b35f
udica< 0:0.2.4-1.module+el8.7.0+16212+65e1b35f

Show all 58

1 vendor · 58 products

References

55 links

Show all 55 references

bugzilla.redhat.com/show_bug.cgi?id=2107386REPORT
bugzilla.redhat.com/show_bug.cgi?id=2107390REPORT
bugzilla.redhat.com/show_bug.cgi?id=2107392REPORT
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7529.jsonAdvisory
access.redhat.com/security/cve/CVE-2022-1705REPORT
www.cve.org/CVERecord?id=CVE-2022-1705Advisory
nvd.nist.gov/vuln/detail/CVE-2022-1705Advisory
go.dev/issue/53188ARTICLE
groups.google.com/g/golang-announce/c/nqrv9fbR0zEARTICLE
access.redhat.com/security/cve/CVE-2022-1708REPORT
www.cve.org/CVERecord?id=CVE-2022-1708Advisory
nvd.nist.gov/vuln/detail/CVE-2022-1708Advisory
github.com/cri-o/cri-o/security/advisories/GHSA-fcm2-6c3h-pg6jARTICLE
access.redhat.com/security/cve/CVE-2022-1962REPORT
www.cve.org/CVERecord?id=CVE-2022-1962Advisory
nvd.nist.gov/vuln/detail/CVE-2022-1962Advisory
go.dev/issue/53616ARTICLE
access.redhat.com/security/cve/CVE-2022-21698REPORT
www.cve.org/CVERecord?id=CVE-2022-21698Advisory
nvd.nist.gov/vuln/detail/CVE-2022-21698Advisory
github.com/prometheus/client_golang/security/advisories/GHSA-cg3q-j54f-5p7pARTICLE
access.redhat.com/security/cve/CVE-2022-28131REPORT
www.cve.org/CVERecord?id=CVE-2022-28131Advisory
nvd.nist.gov/vuln/detail/CVE-2022-28131Advisory
go.dev/issue/53614ARTICLE
access.redhat.com/security/cve/CVE-2022-30630REPORT
www.cve.org/CVERecord?id=CVE-2022-30630Advisory
nvd.nist.gov/vuln/detail/CVE-2022-30630Advisory
go.dev/issue/53415ARTICLE
access.redhat.com/security/cve/CVE-2022-30631REPORT
www.cve.org/CVERecord?id=CVE-2022-30631Advisory
nvd.nist.gov/vuln/detail/CVE-2022-30631Advisory
go.dev/issue/53168ARTICLE
access.redhat.com/security/cve/CVE-2022-30632REPORT
www.cve.org/CVERecord?id=CVE-2022-30632Advisory
nvd.nist.gov/vuln/detail/CVE-2022-30632Advisory
go.dev/issue/53416ARTICLE
access.redhat.com/security/cve/CVE-2022-30633REPORT
www.cve.org/CVERecord?id=CVE-2022-30633Advisory
nvd.nist.gov/vuln/detail/CVE-2022-30633Advisory
go.dev/issue/53611ARTICLE
access.redhat.com/security/cve/CVE-2022-32148REPORT
www.cve.org/CVERecord?id=CVE-2022-32148Advisory
nvd.nist.gov/vuln/detail/CVE-2022-32148Advisory
go.dev/issue/53423ARTICLE