An information disclosure vulnerability was found in containers/podman in versions before 2.0.5. When using the deprecated Varlink API or the Docker-compatible REST API, if multiple containers are created in a short duration, the environment variables from the first container will get leaked into subsequent containers. An attacker who has control over the subsequent containers could use this flaw to gain access to sensitive information stored in such variables.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libslirp-develUpgrade criuUpgrade python3-criuUpgrade udicaUpgrade critUpgrade libslirpUpgrade slirp4netnsUpgrade python-podman-api | May 4, 2022 | Sep 23, 2020 |
| Alpine Linux | — | Upgrade podman | Aug 22, 2024 | Sep 23, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 23, 2020 |
| Centos_linux | — | Upgrade skopeoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-debugsourceUpgrade podman-plugins-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-remoteUpgrade python3-criuUpgrade containernetworking-plugins-debugsourceUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade runc-debuginfoUpgrade containernetworking-pluginsUpgrade libslirp-debugsourceUpgrade buildah-debugsourceUpgrade skopeo-testsUpgrade crun-debugsourceUpgrade podman-catatonit-debuginfoUpgrade container-selinuxUpgrade libslirp-develUpgrade podman-remote-debuginfoUpgrade podmanUpgrade toolboxUpgrade fuse-overlayfs-debugsourceUpgrade conmonUpgrade podman-debuginfoUpgrade crunUpgrade fuse-overlayfs-debuginfoUpgrade podman-pluginsUpgrade containernetworking-plugins-debuginfoUpgrade libslirpUpgrade conmon-debuginfoUpgrade skopeo-debuginfoUpgrade criuUpgrade buildahUpgrade runcUpgrade conmon-debugsourceUpgrade slirp4netnsUpgrade podman-testsUpgrade podman-dockerUpgrade fuse-overlayfsUpgrade libslirp-debuginfoUpgrade python-podman-apiUpgrade runc-debugsourceUpgrade podman-catatonitUpgrade cockpit-podmanUpgrade udicaUpgrade critUpgrade buildah-tests-debuginfoUpgrade crun-debuginfoUpgrade criu-debugsourceUpgrade criu-debuginfoUpgrade buildah-testsUpgrade buildah-debuginfoUpgrade skopeo-debugsource | Nov 11, 2020 | Sep 23, 2020 |
| Debian | — | Upgrade libpod | Jul 30, 2024 | Sep 23, 2020 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Oracle_linux | — | Upgrade podman-testsUpgrade fuse-overlayfsUpgrade libslirpUpgrade udicaUpgrade libslirp-develUpgrade skopeo-testsUpgrade slirp4netnsUpgrade conmonUpgrade crunUpgrade podmanUpgrade criuUpgrade podman-pluginsUpgrade skopeoUpgrade podman-catatonitUpgrade podman-dockerUpgrade python-podman-apiUpgrade critUpgrade buildahUpgrade container-selinuxUpgrade python3-criuUpgrade cockpit-podmanUpgrade containernetworking-pluginsUpgrade buildah-testsUpgrade podman-remoteUpgrade oci-seccomp-bpf-hookUpgrade runcUpgrade containers-common | Feb 20, 2021 | Sep 22, 2020 |
| Redhat Openshift | — | Upgrade podman | Dec 29, 2020 | Sep 22, 2020 |
| Redhat_linux | — | Upgrade skopeoUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade buildah-tests-debuginfoUpgrade slirp4netnsUpgrade criu-debuginfoUpgrade libslirpUpgrade libslirp-develUpgrade buildah-testsUpgrade criuUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade conmonUpgrade oci-seccomp-bpf-hookUpgrade runc-debugsourceUpgrade podman-remote-debuginfoUpgrade buildahUpgrade containers-commonUpgrade crun-debuginfoUpgrade fuse-overlayfsUpgrade buildah-debuginfoUpgrade runc-debuginfoUpgrade crun-debugsourceUpgrade skopeo-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade conmon-debugsourceUpgrade toolboxUpgrade criu-debugsourceUpgrade podman-debuginfoUpgrade skopeo-debuginfoUpgrade containernetworking-pluginsUpgrade python3-criuUpgrade libslirp-debugsourceUpgrade podman-catatonitUpgrade runcUpgrade podman-remoteNo solution existsUpgrade container-selinuxUpgrade podman-debugsourceUpgrade udicaUpgrade crunUpgrade skopeo-testsUpgrade podman-dockerUpgrade podmanUpgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade critUpgrade podman-plugins-debuginfoUpgrade libslirp-debuginfoUpgrade podman-pluginsUpgrade slirp4netns-debugsourceUpgrade conmon-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade cockpit-podmanUpgrade python-podman-apiUpgrade podman-testsUpgrade buildah-debugsource | Nov 11, 2020 | Sep 23, 2020 |
| Rocky_linux | — | Upgrade libslirp-develUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade critUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade slirp4netns-debuginfoUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade libslirp-debuginfoUpgrade libslirp-debugsourceUpgrade criuUpgrade criu-debugsourceUpgrade slirp4netnsUpgrade python3-criuUpgrade libslirpUpgrade criu-debuginfo | Mar 12, 2024 | Sep 23, 2020 |
| Suse | — | Upgrade libseccomp2-32bitUpgrade libseccomp-toolsUpgrade podman-cni-configUpgrade conmonUpgrade libseccomp-develUpgrade podmanUpgrade libseccomp2Upgrade libcontainers-common | Nov 28, 2020 | Sep 23, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub