March 5, 20224 yr Does unRAID have app armor or selinux enabled? This pending vulnerability looks like it can be negated by either. https://nvd.nist.gov/vuln/detail/CVE-2022-0492
March 6, 20224 yr According to the Unit42 breakdown of the vulnerability, there is a test script and docker image you can run to determine if you're affected. https://unit42.paloaltonetworks.com/cve-2022-0492-cgroups/#Am-I-Affected Quote Unit 42 researchers created a script that can test whether a container environment is vulnerable to CVE-2022-0492. To test your environment, you can simply deploy a new container running our us-central1-docker.pkg.dev/twistlock-secresearch/public/can-ctr-escape-cve-2022-0492 image, which is configured to run the script, print its output and exit. Alternatively, you can build and run your own image using the Dockerfile included in the tool's repository. I've run on my Unraid and get the below: Quote [*] Testing whether CVE-2022-0492 can be exploited for container escape [+] Contained: cannot escape via CVE-2022-0492 Looks good, but would still need feedback from Limetech to confirm.
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.