CVE:CVE-2022-24769
CNNVD:CNNVD-202203-2111
Moby是一个开源项目，旨在推动软件的容器化，并帮助生态系统使容器技术主流化。
Moby 20.10.14 之前版本存在权限许可和访问控制问题漏洞，该漏洞源于容器使用非空的可继承 Linux 进程功能错误地启动，从而导致绕过安全限制和权限提升。攻击者可以通过默认可继承功能绕过容器的限制，以提升其权限。
solution:Upgrade mobyproject moby to a higher version than 20.10.14,and avoid the version (,20.10.14); Upgrade fedoraproject fedora to a higher version than 34,35,36,and avoid the version 34,35,36; Upgrade linuxfoundation runc to a higher version than 1.1.2,and avoid the version (,1.1.2); Upgrade debian debian_linux to a higher version than 11.0,and avoid the version 11.0