{"id":"CVE-2022-25914","summary":"Remote Code Execution (RCE)","details":"The package com.google.cloud.tools:jib-core before 0.22.0 are vulnerable to Remote Code Execution (RCE) via the isDockerInstalled function, due to attempting to execute input.","aliases":["GHSA-936v-cg49-m2g5"],"modified":"2026-08-12T13:00:32.161637Z","published":"2022-09-08T05:05:17.747Z","database_specific":{"cna_assigner":"snyk","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/25xxx/CVE-2022-25914.json"},"references":[{"type":"WEB","url":"https://security.snyk.io/vuln/SNYK-JAVA-COMGOOGLECLOUDTOOLS-2968871"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/25xxx/CVE-2022-25914.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25914"},{"type":"FIX","url":"https://github.com/GoogleContainerTools/jib/commit/67fa40bc2c484da0546333914ea07a89fe44eaaf"},{"type":"FIX","url":"https://github.com/GoogleContainerTools/jib/pull/3744"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/googlecontainertools/jib","events":[{"introduced":"0"},{"fixed":"23a24073fa5c2e649f866187282085bb3fa6c337"},{"fixed":"67fa40bc2c484da0546333914ea07a89fe44eaaf"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"0.22.0"}],"source":["CPE_RANGE","REFERENCES"],"cpe":"cpe:2.3:a:jib_project:jib:*:*:*:*:*:*:*:*"}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-25914.json","vanir_signatures_modified":"2026-08-12T13:00:32Z","vanir_signatures":[{"source":"https://github.com/googlecontainertools/jib/commit/67fa40bc2c484da0546333914ea07a89fe44eaaf","target":{"file":"jib-core/src/main/java/com/google/cloud/tools/jib/docker/CliDockerClient.java","function":"isDefaultDockerInstalled"},"deprecated":false,"digest":{"function_hash":"188023400010800804454792360816463358067","length":66},"id":"CVE-2022-25914-120a627a","signature_type":"Function","signature_version":"v1"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/googlecontainertools/jib/commit/67fa40bc2c484da0546333914ea07a89fe44eaaf","target":{"file":"jib-core/src/main/java/com/google/cloud/tools/jib/docker/CliDockerClient.java"},"deprecated":false,"digest":{"line_hashes":["90012441611536306745375858598407629414","337930395447615797428027332141653835449","92505504910727629167831959198580950413","34198078719907756724331818517486489460","19824461718912398881872573075279423939","121724100989068866062873641993856529141","308379702546440621571614948432062820322","277936410134013581068514725455049029736","88627993096655256743244117259665043851","17565565184503583813946114528171289960","51144568367782954580834895328295827283","263940968436123019075801079013164884422","43255123356282200350613598415813472936"],"threshold":0.9},"id":"CVE-2022-25914-67b72013"},{"source":"https://github.com/googlecontainertools/jib/commit/67fa40bc2c484da0546333914ea07a89fe44eaaf","target":{"file":"jib-core/src/test/java/com/google/cloud/tools/jib/docker/CliDockerClientTest.java"},"deprecated":false,"digest":{"line_hashes":["319770219669167263223143083474000243652","58561243082290470065226373035835375312","253066469859778485980947099206490657622","88796707359779959000080454536609660478","250169726291676915519636122500213826560","172557102128809386266827450075305921969","176835611882921289556796122807051352486","210802633310902479453725895857767847616","79865048151952943921614231240181809083","214122916347948305763925877154186603957","95657977750370807453403563652177856247","303285954741330971124135210226939492983"],"threshold":0.9},"id":"CVE-2022-25914-da9dae83","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"16126682970378420054364998922015783091","length":155},"id":"CVE-2022-25914-dc0717e7","signature_type":"Function","signature_version":"v1","source":"https://github.com/googlecontainertools/jib/commit/67fa40bc2c484da0546333914ea07a89fe44eaaf","target":{"file":"jib-core/src/main/java/com/google/cloud/tools/jib/docker/CliDockerClient.java","function":"isDockerInstalled"}}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}]}