Github.Com Opencontainers Umoci vulnerabilities

1 known vulnerability affecting github.com/opencontainers_umoci.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2021-29136MEDIUM≥ 0, < 0.4.72022-02-15

CVE-2021-29136 [MEDIUM] CWE-20 Improper input validation in umoci Improper input validation in umoci ### Impact umoci 0.4.6 and earlier can be tricked into modifying host files by creating a malicious layer that has a symlink with the name "." (or "/"). Because umoci deletes inodes if they change types, this results in the rootfs directory being replaced with an attacker-controlled symlink. Subsequent image layers will then be applied on top of the target of the symlink (which could be any dir