OPENSUSE-SU-2022:0770-1

Vulnerability from csaf_opensuse - Published: 2022-03-09 08:24 - Updated: 2026-09-20 19:40
Summary
Security update for buildah
Severity
Moderate
Notes
Title of the patch: Security update for buildah
Description of the patch: This update for buildah fixes the following issues: buildah was updated to version 1.23.1: Update to version 1.22.3: * Update dependencies * Post-branch commit * Accept repositories on login/logout Update to version 1.22.0: * c/image, c/storage, c/common vendor before Podman 3.3 release * Proposed patch for 3399 (shadowutils) * Fix handling of --restore shadow-utils * runtime-flag (debug) test: handle old & new runc * Allow dst and destination for target in secret mounts * Multi-arch: Always push updated version-tagged img * imagebuildah.stageExecutor.prepare(): remove pseudonym check * refine dangling filter * Chown with environment variables not set should fail * Just restore protections of shadow-utils * Remove specific kernel version number requirement from install.md * Multi-arch image workflow: Make steps generic * chroot: fix environment value leakage to intermediate processes * Update nix pin with `make nixpkgs` * buildah source - create and manage source images * Update cirrus-cron notification GH workflow * Reuse code from containers/common/pkg/parse * Cirrus: Freshen VM images * Fix excludes exception begining with / or ./ * Fix syntax for --manifest example * vendor containers/common@main * Cirrus: Drop dependence on fedora-minimal * Adjust conformance-test error-message regex * Workaround appearance of differing debug messages * Cirrus: Install docker from package cache * Switch rusagelogfile to use options.Out * Turn stdio back to blocking when command finishes * Add support for default network creation * Cirrus: Updates for master->main rename * Change references from master to main * Add `--env` and `--workingdir` flags to run command * [CI:DOCS] buildah bud: spelling --ignore-file requires parameter * [CI:DOCS] push/pull: clarify supported transports * Remove unused function arguments * Create mountOptions for mount command flags * Extract version command implementation to function * Add --json flags to `mount` and `version` commands * copier.Put(): set xattrs after ownership * buildah add/copy: spelling * buildah copy and buildah add should support .containerignore * Remove unused util.StartsWithValidTransport * Fix documentation of the --format option of buildah push * Don't use alltransports.ParseImageName with known transports * man pages: clarify `rmi` removes dangling parents * [CI:DOCS] Fix links to c/image master branch * imagebuildah: use the specified logger for logging preprocessing warnings * Fix copy into workdir for a single file * Fix docs links due to branch rename * Update nix pin with `make nixpkgs` * fix(docs): typo * Move to v1.22.0-dev * Fix handling of auth.json file while in a user namespace * Add rusage-logfile flag to optionally send rusage to a file * imagebuildah: redo step logging * Add volumes to make running buildah within a container easier * Add and use a 'copy' helper instead of podman load/save * Bump github.com/containers/common from 0.38.4 to 0.39.0 * containerImageRef/containerImageSource: don't buffer uncompressed layers * containerImageRef(): squashed images have no parent images * Sync. workflow across skopeo, buildah, and podman * Bump github.com/containers/storage from 1.31.1 to 1.31.2 * Bump github.com/opencontainers/runc from 1.0.0-rc94 to 1.0.0-rc95 * Bump to v1.21.1-dev [NO TESTS NEEDED]
Patchnames: openSUSE-SLE-15.3-2022-770
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2019-10214
9 (Critical)
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.x86_64 —
Vendor Fix
Threats
Impact moderate
CVE-2020-10696
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2019-10214
Threats
Impact important
CVE-2021-20206
7.2 (High)
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2019-10214
Threats
Impact important
References
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for buildah",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for buildah fixes the following issues:\n\nbuildah was updated to version 1.23.1:\n\nUpdate to version 1.22.3:\n\n* Update dependencies\n* Post-branch commit\n* Accept repositories on login/logout\n\nUpdate to version 1.22.0:\n\n* c/image, c/storage, c/common vendor before Podman 3.3 release\n* Proposed patch for 3399 (shadowutils)\n* Fix handling of --restore shadow-utils\n* runtime-flag (debug) test: handle old \u0026 new runc\n* Allow dst and destination for target in secret mounts\n* Multi-arch: Always push updated version-tagged img\n* imagebuildah.stageExecutor.prepare(): remove pseudonym check\n* refine dangling filter\n* Chown with environment variables not set should fail\n* Just restore protections of shadow-utils\n* Remove specific kernel version number requirement from install.md\n* Multi-arch image workflow: Make steps generic\n* chroot: fix environment value leakage to intermediate processes\n* Update nix pin with `make nixpkgs`\n* buildah source - create and manage source images\n* Update cirrus-cron notification GH workflow\n* Reuse code from containers/common/pkg/parse\n* Cirrus: Freshen VM images\n* Fix excludes exception begining with / or ./\n* Fix syntax for --manifest example\n* vendor containers/common@main\n* Cirrus: Drop dependence on fedora-minimal\n* Adjust conformance-test error-message regex\n* Workaround appearance of differing debug messages\n* Cirrus: Install docker from package cache\n* Switch rusagelogfile to use options.Out\n* Turn stdio back to blocking when command finishes\n* Add support for default network creation\n* Cirrus: Updates for master-\u003emain rename\n* Change references from master to main\n* Add `--env` and `--workingdir` flags to run command\n* [CI:DOCS] buildah bud: spelling --ignore-file requires parameter\n* [CI:DOCS] push/pull: clarify supported transports\n* Remove unused function arguments\n* Create mountOptions for mount command flags\n* Extract version command implementation to function\n* Add --json flags to `mount` and `version` commands\n* copier.Put(): set xattrs after ownership\n* buildah add/copy: spelling\n* buildah copy and buildah add should support .containerignore\n* Remove unused util.StartsWithValidTransport\n* Fix documentation of the --format option of buildah push\n* Don\u0027t use alltransports.ParseImageName with known transports\n* man pages: clarify `rmi` removes dangling parents\n* [CI:DOCS] Fix links to c/image master branch\n* imagebuildah: use the specified logger for logging preprocessing warnings\n* Fix copy into workdir for a single file\n* Fix docs links due to branch rename\n* Update nix pin with `make nixpkgs`\n* fix(docs): typo\n* Move to v1.22.0-dev\n* Fix handling of auth.json file while in a user namespace\n* Add rusage-logfile flag to optionally send rusage to a file\n* imagebuildah: redo step logging\n* Add volumes to make running buildah within a container easier\n* Add and use a \u0027copy\u0027 helper instead of podman load/save\n* Bump github.com/containers/common from 0.38.4 to 0.39.0\n* containerImageRef/containerImageSource: don\u0027t buffer uncompressed layers\n* containerImageRef(): squashed images have no parent images\n* Sync. workflow across skopeo, buildah, and podman\n* Bump github.com/containers/storage from 1.31.1 to 1.31.2\n* Bump github.com/opencontainers/runc from 1.0.0-rc94 to 1.0.0-rc95\n* Bump to v1.21.1-dev [NO TESTS NEEDED]\n\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-SLE-15.3-2022-770",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2022_0770-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2022:0770-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WFIDXN6UAK2I4PPVFPBE4STNQH2FZQ4A/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2022:0770-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WFIDXN6UAK2I4PPVFPBE4STNQH2FZQ4A/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1187812",
        "url": "https://bugzilla.suse.com/1187812"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1192999",
        "url": "https://bugzilla.suse.com/1192999"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10214 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10214/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-10696 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-10696/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-20206 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-20206/"
      }
    ],
    "title": "Security update for buildah",
    "tracking": {
      "current_release_date": "2026-09-20T19:40:28Z",
      "generator": {
        "date": "2022-03-09T08:24:58Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2022:0770-1",
      "initial_release_date": "2022-03-09T08:24:58Z",
      "revision_history": [
        {
          "date": "2022-03-09T08:24:58Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T19:40:28Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "buildah-0:1.23.1-150300.8.3.1.aarch64",
                "product": {
                  "name": "buildah-0:1.23.1-150300.8.3.1.aarch64",
                  "product_id": "buildah-0:1.23.1-150300.8.3.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:buildah_project:buildah:1.23.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/buildah@1.23.1-150300.8.3.1?arch=aarch64\u0026upstream=buildah-0:1.23.1-150300.8.3.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "buildah-0:1.23.1-150300.8.3.1.ppc64le",
                "product": {
                  "name": "buildah-0:1.23.1-150300.8.3.1.ppc64le",
                  "product_id": "buildah-0:1.23.1-150300.8.3.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:buildah_project:buildah:1.23.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/buildah@1.23.1-150300.8.3.1?arch=ppc64le\u0026upstream=buildah-0:1.23.1-150300.8.3.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "buildah-0:1.23.1-150300.8.3.1.s390x",
                "product": {
                  "name": "buildah-0:1.23.1-150300.8.3.1.s390x",
                  "product_id": "buildah-0:1.23.1-150300.8.3.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:buildah_project:buildah:1.23.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/buildah@1.23.1-150300.8.3.1?arch=s390x\u0026upstream=buildah-0:1.23.1-150300.8.3.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "buildah-0:1.23.1-150300.8.3.1.x86_64",
                "product": {
                  "name": "buildah-0:1.23.1-150300.8.3.1.x86_64",
                  "product_id": "buildah-0:1.23.1-150300.8.3.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:buildah_project:buildah:1.23.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/buildah@1.23.1-150300.8.3.1?arch=x86_64\u0026upstream=buildah-0:1.23.1-150300.8.3.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.3",
                "product": {
                  "name": "openSUSE Leap 15.3",
                  "product_id": "openSUSE Leap 15.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.3"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-0:1.23.1-150300.8.3.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.aarch64"
        },
        "product_reference": "buildah-0:1.23.1-150300.8.3.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-0:1.23.1-150300.8.3.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.ppc64le"
        },
        "product_reference": "buildah-0:1.23.1-150300.8.3.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-0:1.23.1-150300.8.3.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.s390x"
        },
        "product_reference": "buildah-0:1.23.1-150300.8.3.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-0:1.23.1-150300.8.3.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.x86_64"
        },
        "product_reference": "buildah-0:1.23.1-150300.8.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-10214",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10214"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift Container Platform, does not enforce TLS connections to the container registry authorization service. An attacker could use this vulnerability to launch a MiTM attack and steal login credentials or bearer tokens.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.aarch64",
          "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.ppc64le",
          "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.s390x",
          "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10214",
          "url": "https://www.suse.com/security/cve/CVE-2019-10214"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1144065 for CVE-2019-10214",
          "url": "https://bugzilla.suse.com/1144065"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.aarch64",
            "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.ppc64le",
            "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.s390x",
            "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.aarch64",
            "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.ppc64le",
            "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.s390x",
            "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-03-09T08:24:58Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-10214"
    },
    {
      "cve": "CVE-2020-10696",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-10696"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A path traversal flaw was found in Buildah in versions before 1.14.5. This flaw allows an attacker to trick a user into building a malicious container image hosted on an HTTP(s) server and then write files to the user\u0027s system anywhere that the user has permissions.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.aarch64",
          "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.ppc64le",
          "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.s390x",
          "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-10696",
          "url": "https://www.suse.com/security/cve/CVE-2020-10696"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1167864 for CVE-2020-10696",
          "url": "https://bugzilla.suse.com/1167864"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.aarch64",
            "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.ppc64le",
            "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.s390x",
            "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.aarch64",
            "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.ppc64le",
            "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.s390x",
            "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-03-09T08:24:58Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-10696"
    },
    {
      "cve": "CVE-2021-20206",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-20206"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the \u0027type\u0027 field in the network configuration, it is possible to use special elements such as \"../\" separators to reference binaries elsewhere on the system. This flaw allows an attacker to execute other existing binaries other than the cni plugins/types, such as \u0027reboot\u0027. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.aarch64",
          "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.ppc64le",
          "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.s390x",
          "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-20206",
          "url": "https://www.suse.com/security/cve/CVE-2021-20206"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1181961 for CVE-2021-20206",
          "url": "https://bugzilla.suse.com/1181961"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.aarch64",
            "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.ppc64le",
            "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.s390x",
            "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.aarch64",
            "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.ppc64le",
            "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.s390x",
            "openSUSE Leap 15.3:buildah-0:1.23.1-150300.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-03-09T08:24:58Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-20206"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.