An information disclosure vulnerability was found in containers/podman in versions before 2.0.5. When using the deprecated Varlink API or the Docker-compatible REST API, if multiple containers are created in a short duration, the environment variables from the first container will get leaked into subsequent containers. An attacker who has control over the subsequent containers could use this flaw to gain access to sensitive information stored in such variables.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python-podman-apiUpgrade libslirpUpgrade slirp4netnsUpgrade libslirp-develUpgrade python3-criuUpgrade criuUpgrade udicaUpgrade crit | May 4, 2022 | Sep 23, 2020 |
| Alpine Linux | — | Upgrade podman | Aug 22, 2024 | Sep 23, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 23, 2020 |
| Centos_linux | — | Upgrade runc-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade slirp4netns-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade podman-pluginsUpgrade podman-catatonit-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade crun-debugsourceUpgrade podman-remote-debuginfoUpgrade buildah-debugsourceUpgrade conmonUpgrade container-selinuxUpgrade fuse-overlayfs-debuginfoUpgrade crunUpgrade python3-criuUpgrade podmanUpgrade skopeo-testsUpgrade toolboxUpgrade containernetworking-pluginsUpgrade podman-debugsourceUpgrade skopeoUpgrade libslirp-develUpgrade podman-plugins-debuginfoUpgrade libslirp-debugsourceUpgrade podman-remoteUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-catatonitUpgrade cockpit-podmanUpgrade runcUpgrade runc-debugsourceUpgrade podman-dockerUpgrade python-podman-apiUpgrade buildah-testsUpgrade skopeo-debuginfoUpgrade buildah-debuginfoUpgrade libslirpUpgrade critUpgrade buildah-tests-debuginfoUpgrade buildahUpgrade slirp4netnsUpgrade udicaUpgrade libslirp-debuginfoUpgrade fuse-overlayfsUpgrade crun-debuginfoUpgrade conmon-debuginfoUpgrade criu-debugsourceUpgrade skopeo-debugsourceUpgrade conmon-debugsourceUpgrade podman-testsUpgrade criu-debuginfoUpgrade criu | Nov 11, 2020 | Sep 23, 2020 |
| Debian | — | Upgrade libpod | Jul 30, 2024 | Sep 23, 2020 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Oracle_linux | — | Upgrade oci-seccomp-bpf-hookUpgrade podman-remoteUpgrade buildah-testsUpgrade critUpgrade runcUpgrade containernetworking-pluginsUpgrade cockpit-podmanUpgrade podman-dockerUpgrade python-podman-apiUpgrade buildahUpgrade containers-commonUpgrade python3-criuUpgrade container-selinuxUpgrade podman-pluginsUpgrade criuUpgrade podman-catatonitUpgrade podman-testsUpgrade podmanUpgrade udicaUpgrade conmonUpgrade slirp4netnsUpgrade skopeoUpgrade crunUpgrade fuse-overlayfsUpgrade libslirpUpgrade libslirp-develUpgrade skopeo-tests | Feb 20, 2021 | Sep 22, 2020 |
| Redhat Openshift | — | Upgrade podman | Dec 29, 2020 | Sep 22, 2020 |
| Redhat_linux | — | Upgrade runcUpgrade libslirp-debugsourceUpgrade critUpgrade skopeo-testsUpgrade libslirp-debuginfoUpgrade conmon-debuginfoUpgrade podman-pluginsUpgrade python3-criuUpgrade podman-debuginfoUpgrade buildah-debugsourceUpgrade podman-catatonitUpgrade podman-plugins-debuginfoUpgrade container-selinuxUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade python-podman-apiUpgrade slirp4netns-debugsourceUpgrade udicaUpgrade podman-remoteUpgrade podman-dockerNo solution existsUpgrade slirp4netns-debuginfoUpgrade podman-testsUpgrade skopeo-debuginfoUpgrade podmanUpgrade containernetworking-plugins-debuginfoUpgrade cockpit-podmanUpgrade podman-debugsourceUpgrade crunUpgrade containernetworking-pluginsUpgrade fuse-overlayfsUpgrade fuse-overlayfs-debugsourceUpgrade crun-debugsourceUpgrade runc-debuginfoUpgrade criuUpgrade libslirp-develUpgrade skopeo-debugsourceUpgrade buildah-tests-debuginfoUpgrade criu-debugsourceUpgrade skopeoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade slirp4netnsUpgrade podman-remote-debuginfoUpgrade containers-commonUpgrade criu-debuginfoUpgrade conmon-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debuginfoUpgrade conmonUpgrade podman-catatonit-debuginfoUpgrade toolboxUpgrade libslirpUpgrade buildahUpgrade oci-seccomp-bpf-hookUpgrade crun-debuginfoUpgrade runc-debugsourceUpgrade buildah-tests | Nov 11, 2020 | Sep 23, 2020 |
| Rocky_linux | — | Upgrade slirp4netns-debuginfoUpgrade libslirp-debuginfoUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade critUpgrade libslirp-develUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netns-debugsourceUpgrade python3-criuUpgrade criu-debugsourceUpgrade criuUpgrade libslirpUpgrade slirp4netnsUpgrade criu-debuginfo | Mar 12, 2024 | Sep 23, 2020 |
| Suse | — | Upgrade libcontainers-commonUpgrade conmonUpgrade libseccomp2Upgrade podmanUpgrade podman-cni-configUpgrade libseccomp-develUpgrade libseccomp2-32bitUpgrade libseccomp-tools | Nov 28, 2020 | Sep 23, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub