An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-gvproxyUpgrade libslirpUpgrade cockpit-podmanUpgrade skopeo-testsUpgrade podman-testsUpgrade python3-podmanUpgrade buildah-testsUpgrade crunUpgrade slirp4netnsUpgrade libslirp-develUpgrade containers-commonUpgrade criu-develUpgrade container-selinuxUpgrade criu-libsUpgrade podman-dockerUpgrade conmonUpgrade oci-seccomp-bpf-hookUpgrade python3-criuUpgrade aardvark-dnsUpgrade udicaUpgrade netavarkUpgrade podman-remoteUpgrade criuUpgrade podmanUpgrade skopeoUpgrade podman-pluginsUpgrade containernetworking-pluginsUpgrade buildahUpgrade toolboxUpgrade fuse-overlayfsUpgrade toolbox-testsUpgrade runcUpgrade critUpgrade podman-catatonit | Nov 17, 2022 | Sep 13, 2022 |
| Alpine Linux | — | Upgrade podman | Aug 22, 2024 | Sep 13, 2022 |
| Centos_linux | — | Upgrade slirp4netnsUpgrade podman-dockerUpgrade buildah-debuginfoUpgrade buildah-testsUpgrade conmonUpgrade libslirpUpgrade skopeo-debuginfoUpgrade cockpit-podmanUpgrade skopeoUpgrade skopeo-debugsourceUpgrade podmanUpgrade criu-debugsourceUpgrade conmon-debugsourceUpgrade criuUpgrade criu-libs-debuginfoUpgrade buildahUpgrade toolbox-testsUpgrade fuse-overlayfs-debuginfoUpgrade python3-podmanUpgrade aardvark-dnsUpgrade podman-gvproxyUpgrade podman-catatonitUpgrade netavarkUpgrade fuse-overlayfsUpgrade containernetworking-pluginsUpgrade runc-debugsourceUpgrade criu-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade buildah-tests-debuginfoUpgrade toolboxUpgrade toolbox-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade container-selinuxUpgrade slirp4netns-debugsourceUpgrade criu-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade libslirp-develUpgrade conmon-debuginfoUpgrade podman-remoteUpgrade podman-plugins-debuginfoUpgrade podman-debugsourceUpgrade podman-catatonit-debuginfoUpgrade libslirp-debuginfoUpgrade udicaUpgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-debugsourceUpgrade podman-remote-debuginfoUpgrade containers-commonUpgrade podman-debuginfoUpgrade podman-pluginsUpgrade criu-libsUpgrade skopeo-testsUpgrade toolbox-debuginfoUpgrade python3-criuUpgrade crun-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade critUpgrade podman-testsUpgrade runc-debuginfoUpgrade crun-debugsourceUpgrade crunUpgrade oci-seccomp-bpf-hookUpgrade runc | Nov 9, 2022 | Sep 13, 2022 |
| Debian | — | Upgrade libpod | Jul 30, 2024 | Sep 13, 2022 |
| Gentoo Linux | — | Upgrade app-containers/podman. | Jul 9, 2024 | Sep 13, 2022 |
| Oracle_linux | — | Upgrade libslirpUpgrade podman-gvproxyUpgrade podman-dockerUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade runcUpgrade python3-criuUpgrade udicaUpgrade conmonUpgrade buildahUpgrade podman-catatonitUpgrade criuUpgrade fuse-overlayfsUpgrade crunUpgrade podman-testsUpgrade aardvark-dnsUpgrade netavarkUpgrade python3-podmanUpgrade critUpgrade buildah-testsUpgrade container-selinuxUpgrade criu-libsUpgrade podmanUpgrade skopeoUpgrade skopeo-testsUpgrade podman-pluginsUpgrade libslirp-develUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade criu-develUpgrade containers-commonUpgrade oci-seccomp-bpf-hook | Nov 22, 2022 | Aug 22, 2022 |
| Redhat Openshift | — | Upgrade kernel-rtUpgrade openshift-ansibleUpgrade openshift-kuryrUpgrade buildahUpgrade openshift4-aws-isoUpgrade runcUpgrade conmonUpgrade podmanUpgrade kernelUpgrade openshiftUpgrade skopeoUpgrade openshift-clientsUpgrade containernetworking-plugins | Aug 10, 2026 | Aug 22, 2022 |
| Redhat_linux | — | Upgrade skopeo-testsUpgrade slirp4netns-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade podman-remoteUpgrade crun-debugsourceUpgrade podman-debugsourceUpgrade buildah-debugsourceUpgrade crun-debuginfoUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade python3-criuUpgrade python3-podmanUpgrade criu-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-pluginsUpgrade skopeoUpgrade fuse-overlayfs-debugsourceUpgrade toolboxUpgrade libslirp-develUpgrade criu-libsUpgrade criu-debugsourceUpgrade container-selinuxUpgrade podman-remote-debuginfoUpgrade crunUpgrade containernetworking-pluginsUpgrade toolbox-debuginfoUpgrade libslirp-debugsourceUpgrade containers-commonUpgrade podman-debuginfoUpgrade runc-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade podman-plugins-debuginfoUpgrade slirp4netns-debuginfoUpgrade podmanUpgrade podman-catatonit-debuginfoUpgrade buildahUpgrade podman-gvproxy-debuginfoUpgrade fuse-overlayfsUpgrade conmonUpgrade slirp4netnsUpgrade podman-gvproxyNo solution existsUpgrade podman-catatonitUpgrade cockpit-podmanUpgrade podman-dockerUpgrade criu-libs-debuginfoUpgrade criu-debuginfoUpgrade podman-testsUpgrade runc-debugsourceUpgrade udicaUpgrade skopeo-debuginfoUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-debuginfoUpgrade netavarkUpgrade critUpgrade skopeo-debugsourceUpgrade criuUpgrade buildah-debuginfoUpgrade toolbox-debugsourceUpgrade conmon-debugsourceUpgrade runcUpgrade toolbox-testsUpgrade conmon-debuginfoUpgrade buildah-testsUpgrade libslirp | Nov 9, 2022 | Sep 13, 2022 |
| Rocky_linux | — | Upgrade podman-pluginsUpgrade slirp4netns-debugsourceUpgrade podman-remote-debuginfoUpgrade criu-libsUpgrade containernetworking-plugins-debugsourceUpgrade conmonUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade runcUpgrade toolboxUpgrade crun-debugsourceUpgrade fuse-overlayfsUpgrade conmon-debugsourceUpgrade buildah-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade oci-seccomp-bpf-hookUpgrade criuUpgrade skopeo-testsUpgrade containernetworking-plugins-debuginfoUpgrade criu-develUpgrade skopeoUpgrade toolbox-debugsourceUpgrade podman-catatonit-debuginfoUpgrade criu-libs-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade netavarkUpgrade containers-commonUpgrade libslirp-develUpgrade runc-debuginfoUpgrade podman-catatonitUpgrade podmanUpgrade crunUpgrade libslirp-debugsourceUpgrade slirp4netns-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade conmon-debuginfoUpgrade podman-debugsourceUpgrade podman-gvproxyUpgrade podman-debuginfoUpgrade criu-debuginfoUpgrade buildah-debuginfoUpgrade slirp4netnsUpgrade critUpgrade skopeo-debugsourceUpgrade skopeo-debuginfoUpgrade podman-plugins-debuginfoUpgrade libslirp-debuginfoUpgrade toolbox-testsUpgrade criu-debugsourceUpgrade aardvark-dnsUpgrade toolbox-debuginfoUpgrade runc-debugsourceUpgrade crun-debuginfoUpgrade buildahUpgrade libslirpUpgrade buildah-tests-debuginfoUpgrade buildah-testsUpgrade python3-criuUpgrade podman-tests | Mar 12, 2024 | Sep 13, 2022 |
| Suse | — | Upgrade podman-dockerUpgrade podman-cni-configUpgrade podman-remoteUpgrade podman | Nov 1, 2022 | Sep 13, 2022 |
| Ubuntu | — | Upgrade podman-dockerUpgrade podman | Aug 17, 2023 | Sep 13, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub