PT-2022-10660 · Clair · Clair

Yanir Tsarimi · Published 2022-03-03 · Updated 2023-01-30 · CVE-2021-3762

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Clair versions (affected versions not specified)

Description A directory traversal issue in the ClairCore engine allows an attacker to exploit the system by providing a crafted container image. When scanned by Clair, this can lead to arbitrary file write on the filesystem, potentially enabling remote code execution. Additionally, a maliciously crafted RPM file can cause the Scanner.Scan function to write files with arbitrary contents to arbitrary locations on the local filesystem.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2021-3762

GHSA-MQ47-6WWV-V79W

GO-2022-0346

Affected Products

Clair

References · 17

• 🔥 https://vulmon.com/exploitdetails?qidtp=maillist_oss_security&qid=d19fce9ede06e13dfb5630ece7f14f83 · Exploit
• https://github.com/quay/clair/pull/1380 · Patch
• https://github.com/quay/clair/pull/1379 · Patch
• https://github.com/quay/claircore/commit/691f2023a1720a0579e688b69a2f4bfe1f4b7821 · Patch
• https://github.com/quay/claircore/pull/478 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-3762 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2000795 · Patch
• https://osv.dev/vulnerability/GHSA-mq47-6wwv-v79w · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-3762 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2022-0346 · Vendor Advisory
• https://github.com/quay/claircore/commits/v1.1.0 · Note
• https://github.com/quay/claircore/commit/dff671c665141f126c072de8a744855d4916c9c7 · Note
• https://github.com/quay/claircore/commits/v0.5.5 · Note
• https://github.com/quay/claircore · Note
• https://github.com/quay/claircore/commits/v0.4.8 · Note