ByteOS Network

NVD Vulnerability Details :

CVE-2022-42150

Modified

Source-cve@mitre.org

Published At-19 Oct, 2023 | 20:15

Updated At-07 Nov, 2023 | 03:53

TinyLab linux-lab v1.1-rc1 and cloud-labv0.8-rc2, v1.1-rc1 are vulnerable to insecure permissions. The default configuration could cause Container Escape.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	10.0	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CPE Matches

tinylab>>cloud_lab>>0.8

cpe:2.3:a:tinylab:cloud_lab:0.8:rc2:*:*:*:*:*:*

tinylab>>cloud_lab>>1.1

cpe:2.3:a:tinylab:cloud_lab:1.1:rc1:*:*:*:*:*:*

tinylab>>linux_lab>>1.1

cpe:2.3:a:tinylab:linux_lab:1.1:rc1:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-276	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://github.com/eBPF-Research/eBPF-Attack/blob/main/PoC.md#attack-requirements	cve@mitre.org	Exploit Third Party Advisory
https://github.com/tinyclub/cloud-lab/blob/d19ff92713685a7fb84b423dea6a184b25c378c9/configs/common/seccomp-profiles-default.json	cve@mitre.org	Patch
https://github.com/tinyclub/linux-lab/issues/14	cve@mitre.org	Issue Tracking
https://hackmd.io/%40UR9gnr32QymtmtZHnZceOw/ry428EZGo	cve@mitre.org	N/A
https://www.usenix.org/conference/usenixsecurity23/presentation/he	cve@mitre.org	Exploit Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History