An information disclosure vulnerability was found in containers/podman in versions before 2.0.5. When using the deprecated Varlink API or the Docker-compatible REST API, if multiple containers are created in a short duration, the environment variables from the first container will get leaked into subsequent containers. An attacker who has control over the subsequent containers could use this flaw to gain access to sensitive information stored in such variables.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade udicaUpgrade libslirp-develUpgrade critUpgrade python3-criuUpgrade criuUpgrade libslirpUpgrade python-podman-apiUpgrade slirp4netns | May 4, 2022 | Sep 23, 2020 |
| Alpine Linux | — | Upgrade podman | Aug 22, 2024 | Sep 23, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 23, 2020 |
| Centos_linux | — | Upgrade libslirpUpgrade skopeo-debuginfoUpgrade conmon-debugsourceUpgrade criuUpgrade libslirp-debuginfoUpgrade fuse-overlayfsUpgrade podman-testsUpgrade podman-dockerUpgrade conmon-debuginfoUpgrade runcUpgrade slirp4netnsUpgrade critUpgrade crun-debuginfoUpgrade skopeo-debugsourceUpgrade buildah-debuginfoUpgrade buildah-testsUpgrade criu-debuginfoUpgrade cockpit-podmanUpgrade buildah-tests-debuginfoUpgrade python-podman-apiUpgrade podman-catatonitUpgrade criu-debugsourceUpgrade runc-debugsourceUpgrade udicaUpgrade buildahUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netns-debugsourceUpgrade conmonUpgrade slirp4netns-debuginfoUpgrade podman-remote-debuginfoUpgrade crun-debugsourceUpgrade buildah-debugsourceUpgrade skopeo-testsUpgrade skopeoUpgrade libslirp-develUpgrade libslirp-debugsourceUpgrade crunUpgrade fuse-overlayfs-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-remoteUpgrade podman-plugins-debuginfoUpgrade podman-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade podman-pluginsUpgrade podman-debuginfoUpgrade containernetworking-pluginsUpgrade podmanUpgrade toolboxUpgrade containernetworking-plugins-debugsourceUpgrade python3-criuUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade podman-catatonit-debuginfoUpgrade container-selinux | Nov 11, 2020 | Sep 23, 2020 |
| Debian | — | Upgrade libpod | Jul 30, 2024 | Sep 23, 2020 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Oracle_linux | — | Upgrade buildahUpgrade cockpit-podmanUpgrade containernetworking-pluginsUpgrade podman-dockerUpgrade container-selinuxUpgrade python-podman-apiUpgrade podman-remoteUpgrade runcUpgrade critUpgrade containers-commonUpgrade buildah-testsUpgrade python3-criuUpgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade conmonUpgrade podman-catatonitUpgrade podman-testsUpgrade podmanUpgrade fuse-overlayfsUpgrade libslirpUpgrade udicaUpgrade libslirp-develUpgrade podman-pluginsUpgrade criuUpgrade skopeoUpgrade slirp4netnsUpgrade crun | Feb 20, 2021 | Sep 22, 2020 |
| Redhat Openshift | — | Upgrade podman | Dec 29, 2020 | Sep 22, 2020 |
| Redhat_linux | — | Upgrade libslirp-develUpgrade toolboxUpgrade criu-debugsourceUpgrade containers-commonUpgrade libslirpUpgrade slirp4netnsUpgrade runc-debuginfoUpgrade crun-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade buildah-tests-debuginfoUpgrade skopeoUpgrade buildah-debuginfoUpgrade criuUpgrade conmon-debugsourceUpgrade crun-debuginfoUpgrade skopeo-debugsourceUpgrade buildah-testsUpgrade runc-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade conmonUpgrade podman-catatonit-debuginfoUpgrade criu-debuginfoUpgrade podman-remote-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade buildahUpgrade fuse-overlayfsUpgrade containernetworking-plugins-debugsourceUpgrade skopeo-testsUpgrade critUpgrade podman-plugins-debuginfoUpgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade python3-criuUpgrade python-podman-apiUpgrade slirp4netns-debugsourceUpgrade podman-testsUpgrade cockpit-podmanUpgrade containernetworking-plugins-debuginfoUpgrade podman-catatonitUpgrade buildah-debugsourceUpgrade podman-debuginfoNo solution existsUpgrade skopeo-debuginfoUpgrade containernetworking-pluginsUpgrade podman-pluginsUpgrade podman-remoteUpgrade container-selinuxUpgrade libslirp-debugsourceUpgrade runcUpgrade udicaUpgrade conmon-debuginfoUpgrade crunUpgrade libslirp-debuginfoUpgrade podman-dockerUpgrade podmanUpgrade podman-debugsource | Nov 11, 2020 | Sep 23, 2020 |
| Rocky_linux | — | Upgrade oci-seccomp-bpf-hookUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade critUpgrade libslirp-debuginfoUpgrade libslirp-debugsourceUpgrade slirp4netns-debuginfoUpgrade libslirp-develUpgrade criu-debugsourceUpgrade libslirpUpgrade python3-criuUpgrade criuUpgrade slirp4netnsUpgrade criu-debuginfo | Mar 12, 2024 | Sep 23, 2020 |
| Suse | — | Upgrade podman-cni-configUpgrade libcontainers-commonUpgrade libseccomp2Upgrade libseccomp-develUpgrade conmonUpgrade podmanUpgrade libseccomp-toolsUpgrade libseccomp2-32bit | Nov 28, 2020 | Sep 23, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub