CVE-2021-3762

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A directory traversal vulnerability was found in the ClairCore engine of Clair. An attacker can exploit this by supplying a crafted container image which, when scanned by Clair, allows for arbitrary file write on the filesystem, potentially allowing for remote code execution.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
n/a	quay/claircore	Affects v0.4.6 and higher, v0.5.3 and higher \| Fixedin claircore v0.4.8, v0.5.5.

References

https://bugzilla.redhat.com/show_bug.cgi?id=2000795Issue Tracking, Patch, Third Party Advisory
https://github.com/quay/clair/pull/1379Patch, Third Party Advisory
https://github.com/quay/clair/pull/1380Patch, Third Party Advisory
https://github.com/quay/claircore/commit/691f2023a1720a0579e688b69a2f4bfe1f4b7821Patch, Third Party Advisory
https://github.com/quay/claircore/pull/478Patch, Third Party Advisory
https://vulmon.com/exploitdetails?qidtp=maillist_oss_security&qid=d19fce9ede06e13dfb5630ece7f14f83Exploit, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2000795Issue Tracking, Patch, Third Party Advisory
https://github.com/quay/clair/pull/1379Patch, Third Party Advisory
https://github.com/quay/clair/pull/1380Patch, Third Party Advisory
https://github.com/quay/claircore/commit/691f2023a1720a0579e688b69a2f4bfe1f4b7821Patch, Third Party Advisory
https://github.com/quay/claircore/pull/478Patch, Third Party Advisory
https://vulmon.com/exploitdetails?qidtp=maillist_oss_security&qid=d19fce9ede06e13dfb5630ece7f14f83Exploit, Third Party Advisory

Timeline

Published: Mar 3, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-376205.5Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds CVE-2021-376215.5Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop CVE-2021-376225.5Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop CVE-2021-376235.5Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop CVE-2021-376247.5FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implement CVE-2021-376257.5Skytable is an open source NoSQL database. In versions prior to 0.6.4 an incorrect check of return value of the accept function in the run-l CVE-2021-376267.2Contao is an open source CMS that allows you to create websites and scalable web applications. In affected versions it is possible to load P CVE-2021-376277.2Contao is an open source CMS that allows creation of websites and scalable web applications. In affected versions it is possible to gain pri CVE-2021-376287.5Nextcloud Richdocuments is an open source collaborative office suite. In affected versions the File Drop features ("Upload Only" public link CVE-2021-376295.3Nextcloud Richdocuments is an open source collaborative office suite. In affected versions there is a lack of rate limiting on the Richdocum CVE-2021-37634.3A flaw was found in the Red Hat AMQ Broker management console in version 7.8 where an existing user is able to access some limited informati CVE-2021-376306.5Nextcloud Circles is an open source social network built for the nextcloud ecosystem. In affected versions the Nextcloud Circles application