CVE-2022-42150
- Source
- https://cve.org/CVERecord?id=CVE-2022-42150
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-42150.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2022-42150
- Published
- 2023-10-19T20:15:08.710Z
- Modified
- 2025-12-02T22:55:42.751373Z
- Severity
-
- 10.0 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
TinyLab linux-lab v1.1-rc1 and cloud-labv0.8-rc2, v1.1-rc1 are vulnerable to insecure permissions. The default configuration could cause Container Escape.
- References
-
- https://hackmd.io/%40UR9gnr32QymtmtZHnZceOw/ry428EZGo
- https://github.com/eBPF-Research/eBPF-Attack/blob/main/PoC.md#attack-requirements
- https://www.usenix.org/conference/usenixsecurity23/presentation/he
- https://github.com/tinyclub/linux-lab/issues/14
- https://github.com/tinyclub/cloud-lab/blob/d19ff92713685a7fb84b423dea6a184b25c378c9/configs/common/seccomp-profiles-default.json
Affected packages
Git / github.com/tinyclub/cloud-lab
Affected ranges
- Type
- GIT
- Repo
- https://github.com/tinyclub/cloud-lab
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast affected
Git / github.com/tinyclub/linux-lab
Affected ranges
- Type
- GIT
- Repo
- https://github.com/tinyclub/linux-lab
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast affectedLast affected