Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 (including from remote hosts). This impacts containerized applications that trust localhost (127.0.01) connections by default and do not require authentication. This issue affects Podman 1.8.0 onwards.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-testsUpgrade podman-dockerUpgrade podman-pluginsUpgrade libslirp-develUpgrade podman-gvproxyUpgrade conmonUpgrade cockpit-podmanUpgrade libslirpUpgrade criuUpgrade fuse-overlayfsUpgrade slirp4netnsUpgrade udicaUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade podmanUpgrade python3-criuUpgrade crit | May 4, 2022 | Feb 2, 2021 |
| Alpine Linux | — | Upgrade podman | Aug 22, 2024 | Feb 2, 2021 |
| Centos_linux | — | Upgrade libslirp-develUpgrade fuse-overlayfs-debuginfoUpgrade conmonUpgrade buildah-debugsourceUpgrade podman-remote-debuginfoUpgrade containers-commonUpgrade podmanUpgrade podman-pluginsUpgrade crunUpgrade criuUpgrade conmon-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade podman-catatonitUpgrade podman-catatonit-debuginfoUpgrade runc-debuginfoUpgrade runcUpgrade crun-debugsourceUpgrade containernetworking-pluginsUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade skopeo-testsUpgrade containernetworking-plugins-debuginfoUpgrade libslirp-debugsourceUpgrade podman-remoteUpgrade skopeoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade toolboxUpgrade skopeo-debugsourceUpgrade podman-gvproxyUpgrade container-selinuxUpgrade crun-debuginfoUpgrade runc-debugsourceUpgrade criu-debuginfoUpgrade skopeo-debuginfoUpgrade slirp4netnsUpgrade fuse-overlayfsUpgrade slirp4netns-debuginfoUpgrade podman-debugsourceUpgrade libslirp-debuginfoUpgrade buildahUpgrade conmon-debuginfoUpgrade udicaUpgrade critUpgrade podman-dockerUpgrade buildah-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade buildah-testsUpgrade podman-plugins-debuginfoUpgrade python3-criuUpgrade podman-gvproxy-debuginfoUpgrade cockpit-podmanUpgrade buildah-tests-debuginfoUpgrade criu-debugsourceUpgrade podman-debuginfoUpgrade libslirpUpgrade podman-tests | Jun 1, 2021 | Feb 2, 2021 |
| Debian | — | Upgrade rootlesskitUpgrade libpod | Jul 30, 2024 | Feb 2, 2021 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Oracle_linux | — | Upgrade podman-dockerUpgrade podman-remoteUpgrade python3-criuUpgrade crunUpgrade podman-testsUpgrade containernetworking-pluginsUpgrade skopeo-testsUpgrade udicaUpgrade critUpgrade slirp4netnsUpgrade runcUpgrade container-selinuxUpgrade podman-gvproxyUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hookUpgrade conmonUpgrade buildah-testsUpgrade containers-commonUpgrade buildahUpgrade cockpit-podmanUpgrade libslirp-develUpgrade podman-catatonitUpgrade criuUpgrade fuse-overlayfsUpgrade libslirpUpgrade skopeoUpgrade podman | Nov 22, 2022 | Jan 1, 2021 |
| Redhat_linux | — | Upgrade runc-debuginfoUpgrade podman-gvproxyUpgrade libslirp-develUpgrade conmon-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade runc-debugsourceUpgrade buildahUpgrade containernetworking-plugins-debugsourceUpgrade conmonUpgrade containers-commonUpgrade slirp4netnsUpgrade criu-debugsourceUpgrade podman-catatonit-debuginfoUpgrade toolboxUpgrade criu-debuginfoUpgrade crun-debugsourceUpgrade buildah-tests-debuginfoUpgrade podman-remote-debuginfoUpgrade fuse-overlayfsUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debuginfoUpgrade libslirpUpgrade conmon-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crun-debuginfoUpgrade libslirp-debuginfoUpgrade containernetworking-pluginsUpgrade podman-catatonitUpgrade skopeo-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade podman-debugsourceUpgrade container-selinuxUpgrade slirp4netns-debuginfoUpgrade buildah-testsUpgrade containernetworking-plugins-debuginfoUpgrade skopeo-testsUpgrade crunUpgrade podman-plugins-debuginfoUpgrade runcUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade udicaUpgrade criuUpgrade buildah-debugsourceUpgrade podman-testsUpgrade slirp4netns-debugsourceUpgrade podman-remoteUpgrade podman-dockerUpgrade libslirp-debugsourceUpgrade cockpit-podmanUpgrade podmanUpgrade podman-pluginsUpgrade skopeoUpgrade critUpgrade skopeo-debuginfoUpgrade python3-criu | May 21, 2021 | Feb 2, 2021 |
| Rocky_linux | — | Upgrade skopeo-debuginfoUpgrade skopeo-debugsourceUpgrade podman-debuginfoUpgrade podman-remoteUpgrade criu-debugsourceUpgrade containernetworking-pluginsUpgrade libslirp-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade python3-criuUpgrade podman-plugins-debuginfoUpgrade libslirp-debugsourceUpgrade buildah-debuginfoUpgrade critUpgrade buildahUpgrade conmon-debuginfoUpgrade podman-debugsourceUpgrade slirp4netnsUpgrade buildah-testsUpgrade slirp4netns-debugsourceUpgrade libslirp-develUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade criuUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-catatonitUpgrade containernetworking-plugins-debugsourceUpgrade skopeoUpgrade buildah-tests-debuginfoUpgrade podman-pluginsUpgrade skopeo-testsUpgrade criu-debuginfoUpgrade libslirpUpgrade buildah-debugsourceUpgrade containers-commonUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade conmonUpgrade podman-testsUpgrade podman-remote-debuginfoUpgrade conmon-debugsourceUpgrade oci-seccomp-bpf-hook | Mar 12, 2024 | Feb 2, 2021 |
| Suse | — | Upgrade podman-dockerUpgrade conmonUpgrade libseccomp2-32bitUpgrade libseccomp-develUpgrade libseccomp2Upgrade podman-cni-configUpgrade libcontainers-commonUpgrade libseccomp-toolsUpgrade podman-remoteUpgrade podman | Mar 5, 2022 | Feb 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub