Vulnerability · Published Mar 3, 2022 · Assigned by redhat
CVE-2021-3762
Critical 9.8
In plain English
A critical-severity path traversal in quay/claircore. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 4.8% (higher than 92% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)9.8Critical
Exploit odds (30 days)4.8%top 8.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A directory traversal vulnerability was found in the ClairCore engine of Clair. An attacker can exploit this by supplying a crafted container image which, when scanned by Clair, allows for arbitrary file write on the filesystem, potentially allowing for remote code execution.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Go | github.com/quay/claircore | 0.4.8 | GHSA-mq47-6wwv-v79w |
| Go | github.com/quay/claircore | 1.1.0 | GHSA-mq47-6wwv-v79w |
| Go | github.com/quay/claircore | 0.5.5 | GHSA-mq47-6wwv-v79w |
| Go | github.com/quay/claircore | 1.1.0 | GO-2022-0346 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | quay/claircore | Affects v0.4.6 and higher, v0.5.3 and higher | Fixedin claircore v0.4.8, v0.5.5. |
Weakness: CWE-22
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2000795 x_refsource_MISC
- https://github.com/quay/claircore/pull/478 x_refsource_MISC
- https://github.com/quay/clair/pull/1379 x_refsource_MISC
- https://github.com/quay/clair/pull/1380 x_refsource_MISC
- https://github.com/quay/claircore/commit/691f2023a1720a0579e688b69a2f4bfe1f4b7821 x_refsource_MISC
- https://vulmon.com/exploitdetails?qidtp=maillist_oss_security&qid=d19fce9ede06e13dfb5630ece7f14f83 x_refsource_MISC