writeups.xyz / Exploiting Distroless Images

Submitter : c2a

Date: 22 September 2022

Bounty : undisclosed

Vulnerabilities :

• Command Injection
• Arbitrary File Read
• Arbitrary File Write
• Container Escape

Programs :

• Google

Authors :

• Daniel Teixeira (@TheRedOperator)

Link :
https://www.form3.tech/engineering/content/exploiting-distroless-images