CVE-2022-24778
2 advisories.
Go/github.com/containerd/imgcrypt CVE-2022-24778: high 7.5, EPSS 2.72%
Incorrect Authorization in imgcrypt
Action: Upgrade github.com/containerd/imgcrypt to 1.1.4 or later.
go get github.com/containerd/imgcrypt@v1.1.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.4 | - |
Fixed versions
| 1.1.4 |
Sources
- osv: GHSA-8v99-48m9-c8pm
- https://github.com/containerd/imgcrypt/security/advisories/GHSA-8v99-48m9-c8pm
- https://nvd.nist.gov/vuln/detail/CVE-2022-24778
- https://github.com/containerd/imgcrypt/issues/69
- https://github.com/containerd/imgcrypt/commit/6fdd9818a4d8142107b7ecd767d839c9707700d9
- https://github.com/containerd/imgcrypt
- https://github.com/containerd/imgcrypt/releases/tag/v1.1.4
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4SJUNSC7YZLA745EMKWK2GKEV57GE52K
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TAHAAOOA3KZJC2I5WHCR3XVBJBNWTWUE
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZFTJR5CR5EOYDVOSBZEMLBHLJRTPJPUA
- https://pkg.go.dev/vuln/GO-2021-0412
CVE-2022-24778 · published · modified · JSON
Go/github.com/containerd/imgcrypt CVE-2022-24778: unknown, EPSS 2.72%
Incorrect authorization in github.com/containerd/imgcrypt
Action: Upgrade github.com/containerd/imgcrypt to 1.1.4 or later.
go get github.com/containerd/imgcrypt@v1.1.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.4 | - |
Fixed versions
| 1.1.4 |
Sources
- osv: GO-2021-0412
- https://github.com/containerd/imgcrypt/commit/6fdd9818a4d8142107b7ecd767d839c9707700d9
- https://github.com/containerd/imgcrypt/issues/69
- https://github.com/containerd/imgcrypt/releases/tag/v1.1.4
CVE-2022-24778 · published · modified · JSON