An information disclosure vulnerability was found in containers/podman in versions before 2.0.5. When using the deprecated Varlink API or the Docker-compatible REST API, if multiple containers are created in a short duration, the environment variables from the first container will get leaked into subsequent containers. An attacker who has control over the subsequent containers could use this flaw to gain access to sensitive information stored in such variables.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-criuUpgrade libslirp-develUpgrade criuUpgrade udicaUpgrade critUpgrade python-podman-apiUpgrade libslirpUpgrade slirp4netns | May 4, 2022 | Sep 23, 2020 |
| Alpine Linux | — | Upgrade podman | Aug 22, 2024 | Sep 23, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 23, 2020 |
| Centos_linux | — | Upgrade libslirp-debuginfoUpgrade skopeo-debugsourceUpgrade buildah-debuginfoUpgrade buildah-testsUpgrade criu-debuginfoUpgrade libslirpUpgrade skopeo-debuginfoUpgrade conmon-debuginfoUpgrade buildahUpgrade fuse-overlayfsUpgrade criu-debugsourceUpgrade podman-catatonitUpgrade runc-debugsourceUpgrade critUpgrade podman-testsUpgrade conmon-debugsourceUpgrade buildah-tests-debuginfoUpgrade crun-debuginfoUpgrade udicaUpgrade criuUpgrade slirp4netnsUpgrade python-podman-apiUpgrade cockpit-podmanUpgrade podman-dockerUpgrade runcUpgrade toolboxUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containers-commonUpgrade podman-catatonit-debuginfoUpgrade containernetworking-pluginsUpgrade podmanUpgrade skopeoUpgrade libslirp-develUpgrade skopeo-testsUpgrade libslirp-debugsourceUpgrade crunUpgrade fuse-overlayfs-debuginfoUpgrade crun-debugsourceUpgrade podman-remote-debuginfoUpgrade buildah-debugsourceUpgrade slirp4netns-debuginfoUpgrade container-selinuxUpgrade conmonUpgrade podman-debuginfoUpgrade podman-plugins-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade podman-remoteUpgrade slirp4netns-debugsourceUpgrade podman-debugsourceUpgrade podman-pluginsUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade python3-criuUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hook | Nov 11, 2020 | Sep 23, 2020 |
| Debian | — | Upgrade libpod | Jul 30, 2024 | Sep 23, 2020 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Oracle_linux | — | Upgrade fuse-overlayfsUpgrade libslirpUpgrade udicaUpgrade criuUpgrade podman-catatonitUpgrade podman-testsUpgrade podmanUpgrade crunUpgrade slirp4netnsUpgrade conmonUpgrade skopeoUpgrade skopeo-testsUpgrade libslirp-develUpgrade podman-pluginsUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hookUpgrade buildah-testsUpgrade podman-dockerUpgrade python-podman-apiUpgrade container-selinuxUpgrade podman-remoteUpgrade python3-criuUpgrade containers-commonUpgrade critUpgrade runcUpgrade cockpit-podmanUpgrade buildah | Feb 20, 2021 | Sep 22, 2020 |
| Redhat Openshift | — | Upgrade podman | Dec 29, 2020 | Sep 22, 2020 |
| Redhat_linux | — | Upgrade oci-seccomp-bpf-hook-debuginfoUpgrade udicaUpgrade crunUpgrade python-podman-apiUpgrade podman-pluginsUpgrade podman-testsUpgrade libslirp-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade critUpgrade conmon-debuginfoNo solution existsUpgrade skopeo-debuginfoUpgrade cockpit-podmanUpgrade podman-debugsourceUpgrade podmanUpgrade runcUpgrade slirp4netns-debuginfoUpgrade containernetworking-pluginsUpgrade slirp4netns-debugsourceUpgrade libslirp-debugsourceUpgrade podman-remoteUpgrade buildah-debugsourceUpgrade podman-dockerUpgrade podman-debuginfoUpgrade container-selinuxUpgrade podman-plugins-debuginfoUpgrade podman-catatonitUpgrade skopeo-testsUpgrade python3-criuUpgrade crun-debugsourceUpgrade skopeo-debugsourceUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfs-debuginfoUpgrade crun-debuginfoUpgrade libslirpUpgrade buildahUpgrade runc-debuginfoUpgrade criu-debuginfoUpgrade criuUpgrade runc-debugsourceUpgrade conmon-debugsourceUpgrade conmonUpgrade buildah-debuginfoUpgrade slirp4netnsUpgrade skopeoUpgrade buildah-tests-debuginfoUpgrade criu-debugsourceUpgrade buildah-testsUpgrade libslirp-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade toolboxUpgrade containers-commonUpgrade fuse-overlayfs-debugsourceUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfs | Nov 11, 2020 | Sep 23, 2020 |
| Rocky_linux | — | Upgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-debugsourceUpgrade libslirp-debuginfoUpgrade slirp4netns-debugsourceUpgrade critUpgrade slirp4netns-debuginfoUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade python3-criuUpgrade criu-debugsourceUpgrade criu-debuginfoUpgrade criuUpgrade libslirpUpgrade slirp4netns | Mar 12, 2024 | Sep 23, 2020 |
| Suse | — | Upgrade libseccomp-toolsUpgrade libseccomp2-32bitUpgrade libcontainers-commonUpgrade libseccomp-develUpgrade podman-cni-configUpgrade libseccomp2Upgrade conmonUpgrade podman | Nov 28, 2020 | Sep 23, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub