Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 (including from remote hosts). This impacts containerized applications that trust localhost (127.0.01) connections by default and do not require authentication. This issue affects Podman 1.8.0 onwards.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libslirpUpgrade fuse-overlayfsUpgrade slirp4netnsUpgrade criuUpgrade podman-gvproxyUpgrade conmonUpgrade podman-pluginsUpgrade podman-dockerUpgrade libslirp-develUpgrade podman-testsUpgrade cockpit-podmanUpgrade podman-remoteUpgrade podmanUpgrade containernetworking-pluginsUpgrade udicaUpgrade python3-criuUpgrade crit | May 4, 2022 | Feb 2, 2021 |
| Alpine Linux | — | Upgrade podman | Aug 22, 2024 | Feb 2, 2021 |
| Centos_linux | — | Upgrade libslirpUpgrade buildah-testsUpgrade buildah-debuginfoUpgrade fuse-overlayfsUpgrade crun-debuginfoUpgrade cockpit-podmanUpgrade slirp4netns-debuginfoUpgrade podman-dockerUpgrade criu-debuginfoUpgrade buildah-tests-debuginfoUpgrade buildahUpgrade podman-plugins-debuginfoUpgrade podman-debuginfoUpgrade criu-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade python3-criuUpgrade podman-gvproxy-debuginfoUpgrade podman-testsUpgrade conmon-debuginfoUpgrade libslirp-debuginfoUpgrade udicaUpgrade skopeo-debugsourceUpgrade slirp4netnsUpgrade podman-debugsourceUpgrade critUpgrade skopeo-debuginfoUpgrade container-selinuxUpgrade podman-gvproxyUpgrade runc-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade conmonUpgrade podman-catatonitUpgrade podman-remoteUpgrade oci-seccomp-bpf-hookUpgrade libslirp-debugsourceUpgrade conmon-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade podmanUpgrade runcUpgrade libslirp-develUpgrade crunUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade toolboxUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-pluginsUpgrade slirp4netns-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade skopeoUpgrade criuUpgrade crun-debugsourceUpgrade runc-debuginfoUpgrade containernetworking-pluginsUpgrade podman-catatonit-debuginfoUpgrade containers-commonUpgrade podman-remote-debuginfoUpgrade buildah-debugsource | Jun 1, 2021 | Feb 2, 2021 |
| Debian | — | Upgrade rootlesskitUpgrade libpod | Jul 30, 2024 | Feb 2, 2021 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Oracle_linux | — | Upgrade libslirp-develUpgrade fuse-overlayfsUpgrade conmonUpgrade podman-catatonitUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade buildah-testsUpgrade cockpit-podmanUpgrade libslirpUpgrade buildahUpgrade skopeoUpgrade podmanUpgrade criuUpgrade containernetworking-pluginsUpgrade container-selinuxUpgrade podman-remoteUpgrade critUpgrade skopeo-testsUpgrade podman-dockerUpgrade podman-pluginsUpgrade slirp4netnsUpgrade python3-criuUpgrade runcUpgrade podman-gvproxyUpgrade udicaUpgrade podman-testsUpgrade crun | Nov 22, 2022 | Jan 1, 2021 |
| Redhat_linux | — | Upgrade slirp4netns-debugsourceUpgrade buildah-testsUpgrade skopeo-testsUpgrade podman-debugsourceUpgrade python3-criuUpgrade skopeo-debuginfoUpgrade critUpgrade containernetworking-pluginsUpgrade crunUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-catatonitUpgrade skopeoUpgrade containernetworking-plugins-debuginfoUpgrade runcUpgrade podman-plugins-debuginfoUpgrade cockpit-podmanUpgrade podmanUpgrade udicaUpgrade slirp4netns-debuginfoUpgrade podman-dockerUpgrade podman-debuginfoUpgrade podman-testsUpgrade container-selinuxUpgrade podman-pluginsUpgrade podman-gvproxy-debuginfoUpgrade criuUpgrade libslirp-debuginfoUpgrade buildah-debugsourceUpgrade skopeo-debugsourceUpgrade podman-remoteUpgrade libslirp-debugsourceUpgrade buildah-debuginfoUpgrade conmon-debuginfoUpgrade slirp4netnsUpgrade podman-remote-debuginfoUpgrade fuse-overlayfsUpgrade containernetworking-plugins-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade podman-catatonit-debuginfoUpgrade containers-commonUpgrade criu-debuginfoUpgrade buildahUpgrade crun-debuginfoUpgrade libslirpUpgrade libslirp-develUpgrade toolboxUpgrade runc-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade conmonUpgrade fuse-overlayfs-debugsourceUpgrade buildah-tests-debuginfoUpgrade crun-debugsourceUpgrade runc-debuginfoUpgrade podman-gvproxyUpgrade conmon-debugsource | May 21, 2021 | Feb 2, 2021 |
| Rocky_linux | — | Upgrade podman-catatonitUpgrade containernetworking-plugins-debugsourceUpgrade skopeo-testsUpgrade podman-pluginsUpgrade podmanUpgrade podman-remote-debuginfoUpgrade criuUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildah-tests-debuginfoUpgrade criu-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade conmonUpgrade buildah-debugsourceUpgrade podman-catatonit-debuginfoUpgrade skopeoUpgrade libslirpUpgrade conmon-debugsourceUpgrade podman-testsUpgrade containers-commonUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfsUpgrade python3-criuUpgrade buildahUpgrade podman-remoteUpgrade skopeo-debuginfoUpgrade critUpgrade conmon-debuginfoUpgrade slirp4netnsUpgrade slirp4netns-debugsourceUpgrade libslirp-debugsourceUpgrade buildah-debuginfoUpgrade libslirp-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-pluginsUpgrade podman-debuginfoUpgrade buildah-testsUpgrade criu-debugsourceUpgrade slirp4netns-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-debugsourceUpgrade libslirp-develUpgrade skopeo-debugsourceUpgrade containernetworking-plugins-debuginfo | Mar 12, 2024 | Feb 2, 2021 |
| Suse | — | Upgrade podman-dockerUpgrade conmonUpgrade podman-cni-configUpgrade libseccomp2Upgrade libseccomp2-32bitUpgrade libseccomp-develUpgrade libcontainers-commonUpgrade podman-remoteUpgrade podmanUpgrade libseccomp-tools | Mar 5, 2022 | Feb 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub