Bug 2183639 - podman/conmon: null bytes in logging messages is can result in buffer overread which results in segfault
Summary: podman/conmon: null bytes in logging messages is can result in buffer overrea...
Keywords:
Status: NEW
Alias: None
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Nobody
QA Contact:
URL:
Whiteboard:
Depends On: 2183641 2183642 2183643 2183644 2183645 2183646 2183647 2183648 2183649 2183650 2186700 2186701 2186702 2186703 2186704 2186705 2186706 2186707
Blocks: 2139912
TreeView+ depends on / blocked
 
Reported: 2023-03-31 22:16 UTC by Michael Kaplan
Modified: 2023-11-08 14:21 UTC (History)
22 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description Michael Kaplan 2023-03-31 22:16:43 UTC
A flaw was found in podman/conmon, where conmon doesn't take null bytes into account when it calculates msg_len but g_strdup_printf loop is interrupted when they occur. This can result in the messages being shorter than what msg_len takes into account. This can crash the conman instance for the particular container. 

References:

https://github.com/containers/conmon/issues/315
https://github.com/containers/conmon/pull/361

Comment 1 Michael Kaplan 2023-03-31 22:34:03 UTC
Created conmon tracking bugs for this issue:

Affects: fedora-all [bug 2183643]


Created cri-o tracking bugs for this issue:

Affects: fedora-all [bug 2183644]


Created cri-o:1.20/cri-o tracking bugs for this issue:

Affects: fedora-all [bug 2183645]


Created cri-o:1.21/cri-o tracking bugs for this issue:

Affects: epel-all [bug 2183642]
Affects: fedora-all [bug 2183646]


Created cri-o:1.22/cri-o tracking bugs for this issue:

Affects: fedora-all [bug 2183647]


Created cri-o:1.23/cri-o tracking bugs for this issue:

Affects: fedora-all [bug 2183648]


Created cri-o:1.24/cri-o tracking bugs for this issue:

Affects: fedora-all [bug 2183649]


Created cri-o:1.25/cri-o tracking bugs for this issue:

Affects: fedora-all [bug 2183650]


Created podman tracking bugs for this issue:

Affects: fedora-all [bug 2183641]


Note You need to log in before you can comment on or make changes to this bug.