Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 (including from remote hosts). This impacts containerized applications that trust localhost (127.0.01) connections by default and do not require authentication. This issue affects Podman 1.8.0 onwards.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-testsUpgrade podman-gvproxyUpgrade podman-dockerUpgrade fuse-overlayfsUpgrade criuUpgrade libslirpUpgrade libslirp-develUpgrade conmonUpgrade podman-pluginsUpgrade slirp4netnsUpgrade cockpit-podmanUpgrade python3-criuUpgrade critUpgrade podmanUpgrade containernetworking-pluginsUpgrade udicaUpgrade podman-remote | May 4, 2022 | Feb 2, 2021 |
| Alpine Linux | — | Upgrade podman | Aug 22, 2024 | Feb 2, 2021 |
| Centos_linux | — | Upgrade crun-debuginfoUpgrade container-selinuxUpgrade udicaUpgrade criu-debuginfoUpgrade buildah-testsUpgrade skopeo-debugsourceUpgrade skopeo-debuginfoUpgrade runc-debugsourceUpgrade podman-gvproxyUpgrade libslirpUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade critUpgrade buildah-debuginfoUpgrade python3-criuUpgrade buildah-tests-debuginfoUpgrade buildahUpgrade podman-plugins-debuginfoUpgrade podman-debuginfoUpgrade criu-debugsourceUpgrade podman-dockerUpgrade slirp4netns-debuginfoUpgrade podman-testsUpgrade podman-gvproxy-debuginfoUpgrade podman-debugsourceUpgrade libslirp-debuginfoUpgrade conmon-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfsUpgrade skopeo-testsUpgrade containers-commonUpgrade podman-remoteUpgrade conmon-debugsourceUpgrade podman-catatonitUpgrade fuse-overlayfs-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade podman-remote-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podman-pluginsUpgrade slirp4netns-debugsourceUpgrade criuUpgrade conmonUpgrade libslirp-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade buildah-debugsourceUpgrade crunUpgrade containernetworking-plugins-debugsourceUpgrade podmanUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crun-debugsourceUpgrade runc-debuginfoUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade runcUpgrade skopeoUpgrade toolbox | Jun 1, 2021 | Feb 2, 2021 |
| Debian | — | Upgrade rootlesskitUpgrade libpod | Jul 30, 2024 | Feb 2, 2021 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Oracle_linux | — | Upgrade podman-gvproxyUpgrade podman-dockerUpgrade podman-remoteUpgrade podman-pluginsUpgrade python3-criuUpgrade slirp4netnsUpgrade skopeo-testsUpgrade runcUpgrade containernetworking-pluginsUpgrade udicaUpgrade crunUpgrade critUpgrade podman-testsUpgrade container-selinuxUpgrade criuUpgrade skopeoUpgrade buildah-testsUpgrade cockpit-podmanUpgrade conmonUpgrade libslirp-develUpgrade fuse-overlayfsUpgrade podman-catatonitUpgrade libslirpUpgrade podmanUpgrade buildahUpgrade containers-commonUpgrade oci-seccomp-bpf-hook | Nov 22, 2022 | Jan 1, 2021 |
| Redhat_linux | — | Upgrade podman-remoteUpgrade podman-catatonitUpgrade podman-debugsourceUpgrade skopeo-debugsourceUpgrade slirp4netns-debuginfoUpgrade podman-testsUpgrade podman-debuginfoUpgrade skopeo-debuginfoUpgrade podman-pluginsUpgrade container-selinuxUpgrade critUpgrade cockpit-podmanUpgrade libslirp-debugsourceUpgrade libslirp-debuginfoUpgrade skopeoUpgrade slirp4netns-debugsourceUpgrade skopeo-testsUpgrade podmanUpgrade python3-criuUpgrade podman-gvproxy-debuginfoUpgrade criuUpgrade podman-dockerUpgrade podman-plugins-debuginfoUpgrade udicaUpgrade runcUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade crunUpgrade buildah-debugsourceUpgrade containernetworking-pluginsUpgrade buildah-testsUpgrade containernetworking-plugins-debuginfoUpgrade buildah-tests-debuginfoUpgrade toolboxUpgrade conmonUpgrade containernetworking-plugins-debugsourceUpgrade buildahUpgrade criu-debuginfoUpgrade buildah-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade crun-debugsourceUpgrade runc-debuginfoUpgrade conmon-debugsourceUpgrade fuse-overlayfsUpgrade criu-debugsourceUpgrade crun-debuginfoUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containers-commonUpgrade runc-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade conmon-debuginfoUpgrade podman-gvproxyUpgrade libslirpUpgrade slirp4netnsUpgrade podman-catatonit-debuginfo | May 21, 2021 | Feb 2, 2021 |
| Rocky_linux | — | Upgrade python3-criuUpgrade podman-debugsourceUpgrade libslirp-debugsourceUpgrade slirp4netns-debugsourceUpgrade buildah-debuginfoUpgrade skopeo-debuginfoUpgrade libslirp-develUpgrade buildah-testsUpgrade skopeo-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade podman-remoteUpgrade podman-debuginfoUpgrade podman-plugins-debuginfoUpgrade libslirp-debuginfoUpgrade slirp4netns-debuginfoUpgrade containernetworking-pluginsUpgrade containernetworking-plugins-debuginfoUpgrade criu-debugsourceUpgrade critUpgrade slirp4netnsUpgrade conmon-debuginfoUpgrade buildahUpgrade containers-commonUpgrade podmanUpgrade libslirpUpgrade podman-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debugsourceUpgrade criuUpgrade oci-seccomp-bpf-hookUpgrade buildah-tests-debuginfoUpgrade skopeoUpgrade podman-catatonit-debuginfoUpgrade conmon-debugsourceUpgrade criu-debuginfoUpgrade podman-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade skopeo-testsUpgrade podman-catatonitUpgrade containernetworking-plugins-debugsourceUpgrade podman-remote-debuginfoUpgrade conmonUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hook-debugsource | Mar 12, 2024 | Feb 2, 2021 |
| Suse | — | Upgrade podmanUpgrade libseccomp-toolsUpgrade podman-remoteUpgrade libseccomp2Upgrade libseccomp-develUpgrade libseccomp2-32bitUpgrade conmonUpgrade podman-dockerUpgrade libcontainers-commonUpgrade podman-cni-config | Mar 5, 2022 | Feb 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub