Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 (including from remote hosts). This impacts containerized applications that trust localhost (127.0.01) connections by default and do not require authentication. This issue affects Podman 1.8.0 onwards.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade criuUpgrade slirp4netnsUpgrade conmonUpgrade cockpit-podmanUpgrade fuse-overlayfsUpgrade podman-pluginsUpgrade podman-testsUpgrade libslirp-develUpgrade podman-dockerUpgrade podman-gvproxyUpgrade libslirpUpgrade udicaUpgrade critUpgrade containernetworking-pluginsUpgrade python3-criuUpgrade podmanUpgrade podman-remote | May 4, 2022 | Feb 2, 2021 |
| Alpine Linux | — | Upgrade podman | Aug 22, 2024 | Feb 2, 2021 |
| Centos_linux | — | Upgrade oci-seccomp-bpf-hook-debuginfoUpgrade skopeoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criuUpgrade crunUpgrade toolboxUpgrade slirp4netns-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade podmanUpgrade conmonUpgrade containers-commonUpgrade podman-pluginsUpgrade skopeo-testsUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podman-remoteUpgrade conmon-debugsourceUpgrade runcUpgrade libslirp-develUpgrade libslirp-debugsourceUpgrade crun-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade runc-debuginfoUpgrade podman-remote-debuginfoUpgrade buildah-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade podman-catatonitUpgrade containernetworking-pluginsUpgrade udicaUpgrade skopeo-debugsourceUpgrade criu-debugsourceUpgrade buildah-tests-debuginfoUpgrade buildahUpgrade slirp4netns-debuginfoUpgrade skopeo-debuginfoUpgrade fuse-overlayfsUpgrade libslirp-debuginfoUpgrade conmon-debuginfoUpgrade critUpgrade slirp4netnsUpgrade podman-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade runc-debugsourceUpgrade podman-gvproxyUpgrade crun-debuginfoUpgrade python3-criuUpgrade podman-testsUpgrade criu-debuginfoUpgrade container-selinuxUpgrade podman-gvproxy-debuginfoUpgrade libslirpUpgrade cockpit-podmanUpgrade podman-dockerUpgrade buildah-debuginfoUpgrade buildah-testsUpgrade podman-plugins-debuginfoUpgrade podman-debuginfo | Jun 1, 2021 | Feb 2, 2021 |
| Debian | — | Upgrade rootlesskitUpgrade libpod | Jul 30, 2024 | Feb 2, 2021 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Oracle_linux | — | Upgrade runcUpgrade podman-pluginsUpgrade crunUpgrade container-selinuxUpgrade containernetworking-pluginsUpgrade skopeo-testsUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade podman-remoteUpgrade podman-dockerUpgrade critUpgrade python3-criuUpgrade udicaUpgrade podman-testsUpgrade criuUpgrade cockpit-podmanUpgrade buildah-tests | Nov 22, 2022 | Jan 1, 2021 |
| Redhat_linux | — | Upgrade crun-debugsourceUpgrade buildah-tests-debuginfoUpgrade podman-gvproxyUpgrade runc-debuginfoUpgrade conmon-debugsourceUpgrade runc-debugsourceUpgrade conmon-debuginfoUpgrade slirp4netnsUpgrade crun-debuginfoUpgrade fuse-overlayfsUpgrade libslirp-develUpgrade buildah-debuginfoUpgrade buildahUpgrade criu-debuginfoUpgrade conmonUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade podman-remote-debuginfoUpgrade criu-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade toolboxUpgrade podman-catatonit-debuginfoUpgrade libslirpUpgrade fuse-overlayfs-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containers-commonUpgrade containernetworking-plugins-debuginfoUpgrade podman-debugsourceUpgrade container-selinuxUpgrade skopeoUpgrade podmanUpgrade skopeo-testsUpgrade podman-remoteUpgrade podman-debuginfoUpgrade runcUpgrade libslirp-debuginfoUpgrade containernetworking-pluginsUpgrade cockpit-podmanUpgrade podman-pluginsUpgrade libslirp-debugsourceUpgrade slirp4netns-debugsourceUpgrade podman-dockerUpgrade podman-gvproxy-debuginfoUpgrade buildah-testsUpgrade skopeo-debugsourceUpgrade crunUpgrade critUpgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-plugins-debuginfoUpgrade python3-criuUpgrade skopeo-debuginfoUpgrade podman-catatonitUpgrade buildah-debugsourceUpgrade udicaUpgrade criuUpgrade podman-tests | May 21, 2021 | Feb 2, 2021 |
| Rocky_linux | — | Upgrade podmanUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-debugsourceUpgrade fuse-overlayfsUpgrade libslirpUpgrade fuse-overlayfs-debuginfoUpgrade criu-debuginfoUpgrade podman-catatonit-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade skopeoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-catatonitUpgrade podman-pluginsUpgrade skopeo-testsUpgrade criuUpgrade oci-seccomp-bpf-hookUpgrade conmon-debugsourceUpgrade podman-remote-debuginfoUpgrade containers-commonUpgrade buildah-tests-debuginfoUpgrade conmonUpgrade podman-testsUpgrade python3-criuUpgrade slirp4netnsUpgrade podman-remoteUpgrade fuse-overlayfs-debugsourceUpgrade libslirp-debugsourceUpgrade slirp4netns-debuginfoUpgrade criu-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade containernetworking-pluginsUpgrade slirp4netns-debugsourceUpgrade buildah-debuginfoUpgrade critUpgrade podman-debugsourceUpgrade libslirp-develUpgrade conmon-debuginfoUpgrade skopeo-debugsourceUpgrade skopeo-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-debuginfoUpgrade buildah-testsUpgrade buildahUpgrade libslirp-debuginfo | Mar 12, 2024 | Feb 2, 2021 |
| Suse | — | Upgrade libseccomp-toolsUpgrade podman-remoteUpgrade podmanUpgrade libcontainers-commonUpgrade conmonUpgrade libseccomp2Upgrade podman-cni-configUpgrade libseccomp2-32bitUpgrade libseccomp-develUpgrade podman-docker | Mar 5, 2022 | Feb 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub