A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem, leading to information disclosure or denial of service.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade critUpgrade buildah-testsUpgrade crunUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade podman-testsUpgrade libslirp-develUpgrade libslirpUpgrade podman-gvproxyUpgrade criu-libsUpgrade python3-criuUpgrade skopeo-testsUpgrade aardvark-dnsUpgrade cockpit-podmanUpgrade criu-develUpgrade container-selinuxUpgrade conmonUpgrade udicaUpgrade netavarkUpgrade podman-dockerUpgrade fuse-overlayfsUpgrade python3-podmanUpgrade criuUpgrade podman-catatonitUpgrade runcUpgrade buildahUpgrade toolboxUpgrade skopeoUpgrade containernetworking-pluginsUpgrade podmanUpgrade podman-pluginsUpgrade toolbox-testsUpgrade podman-remote | May 13, 2022 | May 10, 2022 |
| Alpine Linux | — | Upgrade podman | Oct 1, 2024 | Apr 29, 2022 |
| Centos_linux | — | Upgrade container-selinuxUpgrade containernetworking-plugins-debuginfoUpgrade libslirp-develUpgrade podman-debugsourceUpgrade podman-gvproxyUpgrade fuse-overlayfs-debugsourceUpgrade podman-plugins-debuginfoUpgrade podman-testsUpgrade skopeo-testsUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade buildah-testsUpgrade buildah-tests-debuginfoUpgrade crunUpgrade conmonUpgrade criu-develUpgrade crun-debuginfoUpgrade conmon-debuginfoUpgrade containers-commonUpgrade python3-podmanUpgrade containernetworking-plugins-debugsourceUpgrade skopeo-debuginfoUpgrade criu-debuginfoUpgrade slirp4netns-debugsourceUpgrade libslirpUpgrade podman-dockerUpgrade cockpit-podmanUpgrade runc-debugsourceUpgrade slirp4netnsUpgrade runcUpgrade toolbox-debugsourceUpgrade podman-catatonit-debuginfoUpgrade skopeoUpgrade podman-remote-debuginfoUpgrade podman-remoteUpgrade fuse-overlayfsUpgrade crun-debugsourceUpgrade criuUpgrade fuse-overlayfs-debuginfoUpgrade toolboxUpgrade slirp4netns-debuginfoUpgrade buildah-debuginfoUpgrade podman-catatonitUpgrade toolbox-testsUpgrade libslirp-debugsourceUpgrade udicaUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade conmon-debugsourceUpgrade buildahUpgrade critUpgrade aardvark-dnsUpgrade criu-debugsourceUpgrade containernetworking-pluginsUpgrade netavarkUpgrade libslirp-debuginfoUpgrade skopeo-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade toolbox-debuginfoUpgrade podmanUpgrade criu-libs-debuginfoUpgrade buildah-debugsourceUpgrade podman-pluginsUpgrade python3-criuUpgrade oci-seccomp-bpf-hook-debuginfo | May 13, 2022 | Apr 29, 2022 |
| Debian | — | Upgrade golang-github-containers-psgoUpgrade libpod | Jul 30, 2024 | Apr 29, 2022 |
| Oracle_linux | — | Upgrade buildahUpgrade conmonUpgrade criu-libsUpgrade netavarkUpgrade oci-seccomp-bpf-hookUpgrade libslirpUpgrade criuUpgrade podman-catatonitUpgrade podman-gvproxyUpgrade containers-commonUpgrade slirp4netnsUpgrade skopeoUpgrade buildah-testsUpgrade python3-podmanUpgrade libslirp-develUpgrade podmanUpgrade aardvark-dnsUpgrade fuse-overlayfsUpgrade podman-pluginsUpgrade criu-develUpgrade crunUpgrade container-selinuxUpgrade cockpit-podmanUpgrade containernetworking-pluginsUpgrade runcUpgrade skopeo-testsUpgrade podman-dockerUpgrade python3-criuUpgrade podman-remoteUpgrade udicaUpgrade podman-testsUpgrade crit | May 18, 2022 | Jul 15, 2021 |
| Redhat Openshift | — | Upgrade podman | May 30, 2022 | Jul 15, 2021 |
| Redhat_linux | — | Upgrade critUpgrade slirp4netns-debuginfoUpgrade buildah-tests-debuginfoUpgrade podman-gvproxyUpgrade conmon-debuginfoUpgrade podman-debuginfoUpgrade podman-dockerUpgrade criu-debuginfoUpgrade runc-debugsourceUpgrade skopeo-debugsourceUpgrade buildah-testsUpgrade aardvark-dnsUpgrade container-selinuxUpgrade podman-gvproxy-debuginfoUpgrade crun-debuginfoUpgrade buildahUpgrade udicaUpgrade cockpit-podmanUpgrade python-podman-apiUpgrade libslirp-debuginfoUpgrade skopeo-debuginfoUpgrade toolbox-debuginfoUpgrade runcUpgrade criu-debugsourceUpgrade toolbox-testsUpgrade python3-criuUpgrade libslirpUpgrade fuse-overlayfs-debugsourceUpgrade podman-testsUpgrade podman-debugsourceUpgrade libslirp-debugsourceUpgrade slirp4netnsUpgrade podman-remoteUpgrade podman-plugins-debuginfoUpgrade buildah-debuginfoUpgrade conmonUpgrade oci-seccomp-bpf-hookUpgrade toolbox-debugsourceUpgrade podman-catatonit-debuginfoUpgrade containernetworking-pluginsUpgrade netavarkUpgrade skopeoUpgrade criuUpgrade containers-commonUpgrade buildah-debugsourceUpgrade podmanUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade runc-debuginfoUpgrade criu-libs-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade slirp4netns-debugsourceUpgrade skopeo-testsUpgrade fuse-overlayfs-debuginfoNo solution existsUpgrade podman-remote-debuginfoUpgrade podman-catatonitUpgrade conmon-debugsourceUpgrade criu-libsUpgrade podman-pluginsUpgrade crunUpgrade toolboxUpgrade python3-podmanUpgrade crun-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade criu-develUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-develUpgrade fuse-overlayfs | May 13, 2022 | Apr 29, 2022 |
| Rocky_linux | — | Upgrade fuse-overlayfs-debuginfoUpgrade podmanUpgrade containernetworking-plugins-debuginfoUpgrade buildah-tests-debuginfoUpgrade slirp4netns-debuginfoUpgrade containernetworking-pluginsUpgrade libslirp-debuginfoUpgrade crun-debugsourceUpgrade podman-debuginfoUpgrade buildah-debugsourceUpgrade podman-debugsourceUpgrade skopeo-testsUpgrade skopeoUpgrade oci-seccomp-bpf-hookUpgrade runc-debuginfoUpgrade toolboxUpgrade criu-debugsourceUpgrade podman-plugins-debuginfoUpgrade containers-commonUpgrade criu-develUpgrade podman-remoteUpgrade criu-libsUpgrade fuse-overlayfs-debugsourceUpgrade toolbox-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-debugsourceUpgrade podman-remote-debuginfoUpgrade slirp4netns-debugsourceUpgrade libslirp-develUpgrade critUpgrade runc-debugsourceUpgrade netavarkUpgrade slirp4netnsUpgrade criuUpgrade buildah-testsUpgrade aardvark-dnsUpgrade toolbox-testsUpgrade skopeo-debugsourceUpgrade crunUpgrade conmonUpgrade podman-gvproxy-debuginfoUpgrade crun-debuginfoUpgrade podman-testsUpgrade libslirpUpgrade podman-gvproxyUpgrade podman-catatonitUpgrade fuse-overlayfsUpgrade buildahUpgrade conmon-debugsourceUpgrade conmon-debuginfoUpgrade skopeo-debuginfoUpgrade criu-libs-debuginfoUpgrade toolbox-debugsourceUpgrade runcUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade buildah-debuginfoUpgrade criu-debuginfoUpgrade python3-criu | Mar 5, 2024 | Apr 29, 2022 |
| Suse | — | Upgrade podmanUpgrade podman-remoteUpgrade podman-dockerUpgrade podman-cni-config | Oct 26, 2022 | Apr 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub