Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 (including from remote hosts). This impacts containerized applications that trust localhost (127.0.01) connections by default and do not require authentication. This issue affects Podman 1.8.0 onwards.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade udicaUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade podmanUpgrade python3-criuUpgrade critUpgrade podman-dockerUpgrade libslirp-develUpgrade criuUpgrade fuse-overlayfsUpgrade podman-gvproxyUpgrade podman-testsUpgrade libslirpUpgrade podman-pluginsUpgrade slirp4netnsUpgrade conmonUpgrade cockpit-podman | May 4, 2022 | Feb 2, 2021 |
| Alpine Linux | — | Upgrade podman | Aug 22, 2024 | Feb 2, 2021 |
| Centos_linux | — | Upgrade conmonUpgrade buildah-debugsourceUpgrade podman-catatonit-debuginfoUpgrade runc-debuginfoUpgrade crun-debugsourceUpgrade containernetworking-pluginsUpgrade runcUpgrade podmanUpgrade containers-commonUpgrade podman-remote-debuginfoUpgrade conmon-debugsourceUpgrade podman-remoteUpgrade podman-catatonitUpgrade toolboxUpgrade skopeoUpgrade containernetworking-plugins-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criuUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crunUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-plugins-debuginfoUpgrade libslirp-debugsourceUpgrade skopeo-testsUpgrade podman-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade buildahUpgrade buildah-tests-debuginfoUpgrade python3-criuUpgrade podman-testsUpgrade criu-debugsourceUpgrade criu-debuginfoUpgrade podman-debuginfoUpgrade crun-debuginfoUpgrade skopeo-debugsourceUpgrade slirp4netns-debuginfoUpgrade runc-debugsourceUpgrade skopeo-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade udicaUpgrade podman-plugins-debuginfoUpgrade container-selinuxUpgrade podman-dockerUpgrade buildah-debuginfoUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade libslirp-debuginfoUpgrade conmon-debuginfoUpgrade critUpgrade cockpit-podmanUpgrade fuse-overlayfs-debugsourceUpgrade slirp4netnsUpgrade podman-debugsourceUpgrade libslirpUpgrade podman-gvproxy | Jun 1, 2021 | Feb 2, 2021 |
| Debian | — | Upgrade rootlesskitUpgrade libpod | Jul 30, 2024 | Feb 2, 2021 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Oracle_linux | — | Upgrade podman-pluginsUpgrade runcUpgrade podman-gvproxyUpgrade slirp4netnsUpgrade container-selinuxUpgrade containernetworking-pluginsUpgrade critUpgrade podman-testsUpgrade udicaUpgrade python3-criuUpgrade crunUpgrade podman-dockerUpgrade podman-remoteUpgrade skopeo-testsUpgrade fuse-overlayfsUpgrade podman-catatonitUpgrade skopeoUpgrade conmonUpgrade libslirp-develUpgrade podmanUpgrade cockpit-podmanUpgrade buildahUpgrade containers-commonUpgrade libslirpUpgrade criuUpgrade oci-seccomp-bpf-hookUpgrade buildah-tests | Nov 22, 2022 | Jan 1, 2021 |
| Redhat_linux | — | Upgrade containernetworking-plugins-debugsourceUpgrade buildah-tests-debuginfoUpgrade libslirp-develUpgrade conmonUpgrade criu-debuginfoUpgrade buildahUpgrade buildah-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podman-remote-debuginfoUpgrade criu-debugsourceUpgrade fuse-overlayfsUpgrade containers-commonUpgrade libslirpUpgrade conmon-debuginfoUpgrade slirp4netnsUpgrade crun-debuginfoUpgrade runc-debuginfoUpgrade crun-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade toolboxUpgrade podman-catatonit-debuginfoUpgrade runc-debugsourceUpgrade conmon-debugsourceUpgrade podman-gvproxyUpgrade fuse-overlayfs-debugsourceUpgrade udicaUpgrade skopeo-testsUpgrade podmanUpgrade criuUpgrade slirp4netns-debugsourceUpgrade skopeo-debugsourceUpgrade podman-dockerUpgrade container-selinuxUpgrade slirp4netns-debuginfoUpgrade podman-pluginsUpgrade cockpit-podmanUpgrade podman-remoteUpgrade crunUpgrade runcUpgrade skopeo-debuginfoUpgrade podman-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade python3-criuUpgrade podman-gvproxy-debuginfoUpgrade critUpgrade podman-testsUpgrade skopeoUpgrade libslirp-debuginfoUpgrade podman-catatonitUpgrade podman-debugsourceUpgrade containernetworking-pluginsUpgrade buildah-testsUpgrade podman-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade libslirp-debugsourceUpgrade buildah-debugsource | May 21, 2021 | Feb 2, 2021 |
| Rocky_linux | — | Upgrade oci-seccomp-bpf-hook-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podmanUpgrade fuse-overlayfsUpgrade conmon-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade podman-testsUpgrade podman-remote-debuginfoUpgrade conmonUpgrade criuUpgrade containers-commonUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildah-debugsourceUpgrade podman-catatonit-debuginfoUpgrade skopeoUpgrade skopeo-testsUpgrade buildah-tests-debuginfoUpgrade podman-pluginsUpgrade criu-debuginfoUpgrade libslirpUpgrade podman-plugins-debuginfoUpgrade buildah-testsUpgrade python3-criuUpgrade podman-remoteUpgrade libslirp-debugsourceUpgrade slirp4netns-debugsourceUpgrade buildah-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade libslirp-debuginfoUpgrade containernetworking-pluginsUpgrade podman-debugsourceUpgrade libslirp-develUpgrade critUpgrade conmon-debuginfoUpgrade slirp4netnsUpgrade buildahUpgrade criu-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-debuginfoUpgrade skopeo-debugsourceUpgrade skopeo-debuginfo | Mar 12, 2024 | Feb 2, 2021 |
| Suse | — | Upgrade libseccomp2Upgrade libseccomp-develUpgrade libseccomp2-32bitUpgrade libcontainers-commonUpgrade podman-cni-configUpgrade conmonUpgrade podman-dockerUpgrade podman-remoteUpgrade libseccomp-toolsUpgrade podman | Mar 5, 2022 | Feb 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub