CVE-2022-4123

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2022-4123

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-4123.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2022-4123

Aliases

Related

UBUNTU-CVE-2022-4123

Published

2022-12-08T16:15:14Z

Modified

2025-01-08T09:08:12.393447Z

Severity

3.3 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator

Summary

[none]

Details

A flaw was found in Buildah. The local path and the lowest subdirectory may be disclosed due to incorrect absolute path traversal, resulting in an impact to confidentiality.

References

Affected packages

Debian:11 / golang-github-containers-buildah

Package

Name: golang-github-containers-buildah
Purl: pkg:deb/debian/golang-github-containers-buildah?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.19.6+dfsg1-1

1.20.0+ds1-1

1.20.1+ds1-1

1.20.1+ds1-2

1.21.0+ds1-2

1.21.3+ds1-1

1.22.3+ds1-1

1.22.3+ds1-2

1.23.1+ds1-1

1.23.1+ds1-2

1.23.1+ds1-3

1.24.1+ds1-1

1.26.1+ds1-1

1.27.0+ds1-2

1.27.0+ds1-3

1.27.0+ds1-4

1.27.0+ds1-5

1.27.0+ds1-6

1.28.0+ds1-1

1.28.0+ds1-2

1.28.0+ds1-3

1.28.2+ds1-1

1.28.2+ds1-2

1.28.2+ds1-3

1.29.0+ds1-1

1.30.0+ds1-1

1.30.0+ds1-2

1.30.0+ds1-3

1.31.2+ds1-1

1.31.2+ds1-2

1.31.2+ds1-3

1.32.0+ds1-1

1.32.0+ds1-2

1.32.2+ds1-1

1.33.1+ds1-1

1.33.1+ds1-2

1.33.3+ds1-1

1.33.3+ds1-2

1.33.5+ds1-3

1.33.5+ds1-4

1.33.7+ds1-1

1.34.0+ds1-1

1.34.0+ds1-2

1.35.3+ds1-1

1.35.3+ds1-2

1.35.3+ds1-3

1.37.0+ds1-1

1.37.1+ds1-1

1.37.1+ds1-2

1.37.2+ds1-1

1.37.2+ds1-2

1.37.2+ds1-3

1.37.3+ds1-1

1.37.3+ds1-2

1.37.3+ds1-3

1.37.4+ds1-1

1.37.5+ds1-1

1.38.0+ds1-1

1.38.0+ds1-2

Ecosystem specific

{
    "urgency": "unimportant"
}

Debian:12 / golang-github-containers-buildah

Package

Name: golang-github-containers-buildah
Purl: pkg:deb/debian/golang-github-containers-buildah?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.28.2+ds1-3

1.29.0+ds1-1

1.30.0+ds1-1

1.30.0+ds1-2

1.30.0+ds1-3

1.31.2+ds1-1

1.31.2+ds1-2

1.31.2+ds1-3

1.32.0+ds1-1

1.32.0+ds1-2

1.32.2+ds1-1

1.33.1+ds1-1

1.33.1+ds1-2

1.33.3+ds1-1

1.33.3+ds1-2

1.33.5+ds1-3

1.33.5+ds1-4

1.33.7+ds1-1

1.34.0+ds1-1

1.34.0+ds1-2

1.35.3+ds1-1

1.35.3+ds1-2

1.35.3+ds1-3

1.37.0+ds1-1

1.37.1+ds1-1

1.37.1+ds1-2

1.37.2+ds1-1

1.37.2+ds1-2

1.37.2+ds1-3

1.37.3+ds1-1

1.37.3+ds1-2

1.37.3+ds1-3

1.37.4+ds1-1

1.37.5+ds1-1

1.38.0+ds1-1

1.38.0+ds1-2

Ecosystem specific

{
    "urgency": "unimportant"
}

Debian:13 / golang-github-containers-buildah

Package

Name: golang-github-containers-buildah
Purl: pkg:deb/debian/golang-github-containers-buildah?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.28.2+ds1-3

1.29.0+ds1-1

1.30.0+ds1-1

1.30.0+ds1-2

1.30.0+ds1-3

1.31.2+ds1-1

1.31.2+ds1-2

1.31.2+ds1-3

1.32.0+ds1-1

1.32.0+ds1-2

1.32.2+ds1-1

1.33.1+ds1-1

1.33.1+ds1-2

1.33.3+ds1-1

1.33.3+ds1-2

1.33.5+ds1-3

1.33.5+ds1-4

1.33.7+ds1-1

1.34.0+ds1-1

1.34.0+ds1-2

1.35.3+ds1-1

1.35.3+ds1-2

1.35.3+ds1-3

1.37.0+ds1-1

1.37.1+ds1-1

1.37.1+ds1-2

1.37.2+ds1-1

1.37.2+ds1-2

1.37.2+ds1-3

1.37.3+ds1-1

1.37.3+ds1-2

1.37.3+ds1-3

1.37.4+ds1-1

1.37.5+ds1-1

1.38.0+ds1-1

1.38.0+ds1-2

Ecosystem specific

{
    "urgency": "unimportant"
}

Git / github.com/containers/podman

Affected ranges

Type: GIT
Repo: https://github.com/containers/podman
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

0abf243202dc00ecc1f968fc9538b9eb67011716

Last affected

146dcb28dc028fbb0fdb7854f5e0e5863b78abe9

Last affected

62b324ddf718411b1d4d0ba8117c632f7f984a38

Last affected

74aa681e59352257eb5f25f089dffa66d6345a3a

Last affected

7e1f3106fffc30dba17eb3f85b45c5c1d50d6be6

Last affected

7fe5a419cfd2880df2028ad3d7fd9378a88a04f4

Last affected

81005b8d809990a0a2e3367a5980d3c4c2499708

Last affected

ad42af94903ce4f3c3cd0693e4e17e4286bf094b

Last affected

e4b03902052294d4f342a185bb54702ed5bed8b1

Last affected

f73d8f8875c2be7cd2049094c29aff90b1150241

Affected versions

v0.*

v0.10.1

v0.10.1.1

v0.10.1.2

v0.10.1.3

v0.11.1

v0.11.1.1

v0.12.1

v0.12.1.1

v0.12.1.2

v0.2

v0.2.1

v0.2.2

v0.3.1

v0.3.2

v0.3.3

v0.3.4

v0.3.5

v0.4.1

v0.4.2

v0.4.3

v0.4.4

v0.5.1

v0.5.2

v0.5.3

v0.5.4

v0.6.1

v0.6.2

v0.6.3

v0.6.4

v0.6.5

v0.7.1

v0.7.2

v0.7.3

v0.7.4

v0.8.1

v0.8.2

v0.8.2.1

v0.8.3

v0.8.4

v0.8.5

v0.9.1

v0.9.1.1

v0.9.2

v0.9.2.1

v0.9.3

v0.9.3.1

v1.*

v1.1.0

v1.1.1

v1.1.2

v1.2.0

v1.3.0

v1.3.1

v1.4.0

v1.4.1

v1.4.2

v1.4.3

v1.4.4

v1.5.0

v1.5.1

v1.6.0

v1.6.0-rc1

v1.6.0-rc2

v1.6.1

v1.6.1-rc1

v1.6.2

v1.6.2-rc1

v1.7.0

v1.7.0-rc1

v1.7.0-rc2

v1.8.0

v1.8.0-rc1

v1.8.1

v1.8.1-rc1

v1.8.1-rc2

v1.8.1-rc3

v1.8.1-rc4

v1.8.2

v1.8.2-rc1

v1.9.0

v1.9.0-rc1

v1.9.0-rc2

v2.*

v2.0.0-rc1

v2.0.0-rc2

v2.0.0-rc3

v2.0.0-rc4

v2.0.0-rc5

v2.0.0-rc6

v2.0.0-rc7

v2.1.0

v2.1.0-rc1

v2.1.0-rc2

v2.2.0-rc1

v2.2.0-rc2

v3.*

v3.1.0-rc1

v3.2.0-rc1

v4.*

v4.0.0-rc1

v4.0.0-rc2

v4.1.0-rc1

v4.1.0-rc2

v4.2.0

v4.2.0-rc1

v4.2.0-rc2

v4.2.0-rc3

v4.2.1

v4.3.0

v4.3.0-rc1