GO-2022-0558

vendorUSosv

Privilege escalation in github.com/containers/psgo

view advisory published 2022-08-22Licence: per source

The psgo package executes the 'nsenter' binary, potentially allowing privilege escalation when used in environments where nsenter is provided by an untrusted source.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2022-1227UShigh8.8Exploit
A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan