A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem, leading to information disclosure or denial of service.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-podmanUpgrade podman-remoteUpgrade skopeoUpgrade podman-pluginsUpgrade buildahUpgrade conmonUpgrade containernetworking-pluginsUpgrade criuUpgrade podman-dockerUpgrade fuse-overlayfsUpgrade toolbox-testsUpgrade podman-catatonitUpgrade netavarkUpgrade runcUpgrade udicaUpgrade toolboxUpgrade podmanUpgrade containers-commonUpgrade skopeo-testsUpgrade cockpit-podmanUpgrade aardvark-dnsUpgrade criu-develUpgrade buildah-testsUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade container-selinuxUpgrade libslirp-develUpgrade crunUpgrade libslirpUpgrade python3-criuUpgrade critUpgrade podman-tests | May 13, 2022 | May 10, 2022 |
| Alpine Linux | — | Upgrade podman | Oct 1, 2024 | Apr 29, 2022 |
| Centos_linux | — | Upgrade libslirp-debuginfoUpgrade netavarkUpgrade buildah-debugsourceUpgrade criu-libs-debuginfoUpgrade containernetworking-pluginsUpgrade podmanUpgrade toolbox-debuginfoUpgrade toolboxUpgrade slirp4netns-debuginfoUpgrade python3-criuUpgrade podman-remote-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade crun-debugsourceUpgrade fuse-overlayfsUpgrade toolbox-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade aardvark-dnsUpgrade podman-pluginsUpgrade criu-debugsourceUpgrade podman-remoteUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade runcUpgrade podman-catatonitUpgrade podman-catatonit-debuginfoUpgrade toolbox-testsUpgrade libslirp-debugsourceUpgrade buildah-debuginfoUpgrade udicaUpgrade conmon-debugsourceUpgrade skopeo-debugsourceUpgrade criuUpgrade critUpgrade buildahUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade skopeoUpgrade podman-dockerUpgrade slirp4netns-debugsourceUpgrade libslirpUpgrade podman-plugins-debuginfoUpgrade runc-debugsourceUpgrade crunUpgrade podman-debugsourceUpgrade criu-libsUpgrade criu-develUpgrade containernetworking-plugins-debugsourceUpgrade slirp4netnsUpgrade python3-podmanUpgrade podman-testsUpgrade criu-debuginfoUpgrade cockpit-podmanUpgrade skopeo-debuginfoUpgrade conmonUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade buildah-testsUpgrade skopeo-testsUpgrade podman-gvproxyUpgrade crun-debuginfoUpgrade runc-debuginfoUpgrade containers-commonUpgrade conmon-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade containernetworking-plugins-debuginfoUpgrade container-selinux | May 13, 2022 | Apr 29, 2022 |
| Debian | — | Upgrade libpodUpgrade golang-github-containers-psgo | Jul 30, 2024 | Apr 29, 2022 |
| Oracle_linux | — | Upgrade oci-seccomp-bpf-hookUpgrade buildah-testsUpgrade skopeoUpgrade libslirpUpgrade netavarkUpgrade conmonUpgrade criu-libsUpgrade podman-catatonitUpgrade libslirp-develUpgrade aardvark-dnsUpgrade podman-gvproxyUpgrade buildahUpgrade slirp4netnsUpgrade criuUpgrade python3-podmanUpgrade podmanUpgrade fuse-overlayfsUpgrade containers-commonUpgrade podman-dockerUpgrade podman-testsUpgrade criu-develUpgrade cockpit-podmanUpgrade podman-pluginsUpgrade skopeo-testsUpgrade container-selinuxUpgrade crunUpgrade udicaUpgrade runcUpgrade podman-remoteUpgrade python3-criuUpgrade critUpgrade containernetworking-plugins | May 18, 2022 | Jul 15, 2021 |
| Redhat Openshift | — | Upgrade podman | May 30, 2022 | Jul 15, 2021 |
| Redhat_linux | — | Upgrade toolbox-debugsourceUpgrade podman-catatonit-debuginfoNo solution existsUpgrade skopeo-testsUpgrade slirp4netns-debugsourceUpgrade conmonUpgrade fuse-overlayfs-debuginfoUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podmanUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crunUpgrade python3-podmanUpgrade criu-libs-debuginfoUpgrade podman-catatonitUpgrade containers-commonUpgrade criu-develUpgrade toolboxUpgrade podman-pluginsUpgrade netavarkUpgrade buildah-debugsourceUpgrade skopeoUpgrade criuUpgrade conmon-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade criu-libsUpgrade fuse-overlayfsUpgrade podman-remote-debuginfoUpgrade crun-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade buildah-debuginfoUpgrade criu-debugsourceUpgrade slirp4netnsUpgrade fuse-overlayfs-debugsourceUpgrade podman-testsUpgrade podman-remoteUpgrade podman-debuginfoUpgrade conmon-debuginfoUpgrade buildahUpgrade podman-plugins-debuginfoUpgrade python3-criuUpgrade podman-gvproxyUpgrade runc-debugsourceUpgrade cockpit-podmanUpgrade python-podman-apiUpgrade critUpgrade podman-dockerUpgrade aardvark-dnsUpgrade skopeo-debuginfoUpgrade runcUpgrade podman-debugsourceUpgrade skopeo-debugsourceUpgrade toolbox-testsUpgrade toolbox-debuginfoUpgrade buildah-testsUpgrade libslirpUpgrade container-selinuxUpgrade slirp4netns-debuginfoUpgrade libslirp-debugsourceUpgrade criu-debuginfoUpgrade udicaUpgrade podman-gvproxy-debuginfoUpgrade buildah-tests-debuginfoUpgrade libslirp-debuginfoUpgrade crun-debuginfo | May 13, 2022 | Apr 29, 2022 |
| Rocky_linux | — | Upgrade toolbox-debugsourceUpgrade runcUpgrade containernetworking-plugins-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade netavarkUpgrade runc-debugsourceUpgrade slirp4netnsUpgrade skopeo-debugsourceUpgrade criuUpgrade toolbox-testsUpgrade aardvark-dnsUpgrade crunUpgrade conmonUpgrade buildah-testsUpgrade python3-criuUpgrade podman-gvproxy-debuginfoUpgrade skopeo-debuginfoUpgrade conmon-debuginfoUpgrade critUpgrade podman-catatonitUpgrade criu-debuginfoUpgrade fuse-overlayfsUpgrade buildahUpgrade conmon-debugsourceUpgrade criu-libs-debuginfoUpgrade buildah-debuginfoUpgrade podman-testsUpgrade libslirpUpgrade crun-debuginfoUpgrade podman-gvproxyUpgrade toolbox-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade criu-libsUpgrade criu-develUpgrade criu-debugsourceUpgrade containers-commonUpgrade podman-plugins-debuginfoUpgrade skopeo-testsUpgrade containernetworking-plugins-debuginfoUpgrade buildah-debugsourceUpgrade podman-debugsourceUpgrade podman-debuginfoUpgrade crun-debugsourceUpgrade podman-remoteUpgrade oci-seccomp-bpf-hookUpgrade slirp4netns-debugsourceUpgrade podman-remote-debuginfoUpgrade podman-pluginsUpgrade podman-catatonit-debuginfoUpgrade libslirp-debuginfoUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-pluginsUpgrade buildah-tests-debuginfoUpgrade podmanUpgrade libslirp-develUpgrade slirp4netns-debuginfoUpgrade skopeoUpgrade toolbox | Mar 5, 2024 | Apr 29, 2022 |
| Suse | — | Upgrade podman-dockerUpgrade podman-cni-configUpgrade podmanUpgrade podman-remote | Oct 26, 2022 | Apr 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub