Qemu: 9pfs: suid/sgid bits not dropped on file write
CVE-2023-1386
Summary
Mariner
Products covered
azl3 azurelinux-image-tools 1.6.0-3 on Azure Linux 3.0
azl3 cert-manager 1.12.15-14 on Azure Linux 3.0
azl3 containerd2 2.3.4-1 on Azure Linux 3.0
azl3 containerized-data-importer 1.62.0-8 on Azure Linux 3.0
azl3 coredns 1.11.4-21 on Azure Linux 3.0
azl3 docker-buildx 0.14.0-17 on Azure Linux 3.0
azl3 docker-cli 25.0.7-5 on Azure Linux 3.0
azl3 docker-compose 2.27.0-14 on Azure Linux 3.0
Show 15 more products
azl3 gh 2.101.0-1 on Azure Linux 3.0
azl3 influxdb 2.7.5-21 on Azure Linux 3.0
azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0
azl3 kata-containers-cc 3.15.0.aks0-21 on Azure Linux 3.0
azl3 keda 2.14.1-19 on Azure Linux 3.0
azl3 kubernetes 1.30.10-31 on Azure Linux 3.0
azl3 libcontainers-common 20240213-3 on Azure Linux 3.0
azl3 kubevirt-openvmm 1.9.0-1 on Azure Linux 3.0
azl3 moby-containerd-cc 1.7.7-17 on Azure Linux 3.0
azl3 moby-engine 25.0.3-20 on Azure Linux 3.0
azl3 opa 0.63.0-5 on Azure Linux 3.0
azl3 packer 1.9.5-21 on Azure Linux 3.0
azl3 skopeo 1.14.4-13 on Azure Linux 3.0
azl3 telegraf 1.31.0-33 on Azure Linux 3.0
azl3 vitess 19.0.4-14 on Azure Linux 3.0
Remediation
Release Notes
CVEs in this advisory 1
Updates
- Published by Microsoft Security Response Center
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.