CVE-2021-3762

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2022-03-03 · updated 2026-06-17
Weakness: CWE-22

Description

A directory traversal vulnerability was found in the ClairCore engine of Clair. An attacker can exploit this by supplying a crafted container image which, when scanned by Clair, allows for arbitrary file write on the filesystem, potentially allowing for remote code execution.

Affected products

RedHat Clair: from 0.4.6 before 0.4.8; from 0.5.3 before 0.5.5 — fixed in 0.4.8, 0.5.5
Red Hat Quay 3: 3.5.6

How to fix

Upgrade to a fixed version: RedHat Clair 0.4.8, 0.5.5. Check the vendor advisory for mitigations.

References

https://bugzilla.redhat.com/show_bug.cgi?id=2000795
https://github.com/quay/clair/pull/1379
https://github.com/quay/clair/pull/1380
https://github.com/quay/claircore/commit/691f2023a1720a0579e688b69a2f4bfe1f4b7821
https://github.com/quay/claircore/pull/478
https://vulmon.com/exploitdetails?qidtp=maillist_oss_security&qid=d19fce9ede06e13dfb5630ece7f14f83
https://bugzilla.redhat.com/show_bug.cgi?id=2000795
https://github.com/quay/clair/pull/1379
https://github.com/quay/clair/pull/1380
https://github.com/quay/claircore/commit/691f2023a1720a0579e688b69a2f4bfe1f4b7821
https://github.com/quay/claircore/pull/478
https://vulmon.com/exploitdetails?qidtp=maillist_oss_security&qid=d19fce9ede06e13dfb5630ece7f14f83

Get alerted when CVE-2021-3762 or the next vulnerability affects your stack