GO-2022-0558

Privilege escalation in github.com/containers/psgo

En bref

Publiée: 2022-08-22 18:07 UTC
Mise à jour: 2024-05-20 16:03 UTC
CVE: CVE-2022-1227
Alias: GHSA-66vw-v2x9-hw75

Description

The psgo package executes the 'nsenter' binary, potentially allowing privilege escalation when used in environments where nsenter is provided by an untrusted source.

Paquets affectés

Paquet	Versions
Go · github.com/containers/psgo	introduced 0, fixed 1.7.2

Références

https://github.com/containers/psgo/pull/92 FIX
https://github.com/containers/podman/issues/10941 WEB

Sources

Source	Licence
OSV.dev	CC-BY 4.0 — Go Vulnerability Database