UpHeron
All vulnerabilities

Servers and applications

CVE-2022-24769

Default inheritable capabilities for linux container should be empty

Severity
Medium 5.9
Published
24 Mar 2022
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
20.10.14
Also known as
GHSA-2mm7-x5h6-5pvq
Sources
NVD, Project advisories (GitHub)

Description

Moby is an open-source project created by Docker to enable and accelerate software containerization. A bug was found in Moby (Docker Engine) prior to version 20.10.14 where containers were incorrectly started with non-empty inheritable Linux process capabilities, creating an atypical Linux environment and enabling programs with inheritable file capabilities to elevate those capabilities to the…

Affected software

SoftwareAffected versions
Docker EngineServers and applications · cpe:a:mobyproject:moby
  • Every version before 20.10.14
Docker EngineServers and applications · github:moby/moby
  • Every version before 20.10.14

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-24769
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-24769
  • GitHub Advisory Database https://github.com/advisories/GHSA-2mm7-x5h6-5pvq
  • github.com https://github.com/moby/moby/security/advisories/GHSA-2mm7-x5h6-5pvq