A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.
CVSS Details
- CVSS 3.1 Base Score: 8.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libslirpUpgrade buildah-testsUpgrade python3-podmanUpgrade podman-gvproxyUpgrade conmonUpgrade fuse-overlayfsUpgrade criuUpgrade toolbox-testsUpgrade crunUpgrade container-selinuxUpgrade podman-testsUpgrade buildahUpgrade cockpit-podmanUpgrade podman-dockerUpgrade slirp4netnsUpgrade critUpgrade udicaUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hookUpgrade skopeoUpgrade libslirp-develUpgrade criu-develUpgrade containernetworking-pluginsUpgrade podman-pluginsUpgrade containers-commonUpgrade criu-libsUpgrade aardvark-dnsUpgrade skopeo-testsUpgrade runcUpgrade podmanUpgrade python3-criuUpgrade toolboxUpgrade podman-remoteUpgrade netavark | Jul 10, 2025 | Jun 24, 2025 |
| Debian | — | Upgrade podmanNo solution exists | Jun 26, 2025 | Jun 24, 2025 |
| Freebsd | — | Upgrade podman | Jul 1, 2025 | Jun 30, 2025 |
| Oracle_linux | — | Upgrade slirp4netnsUpgrade udicaUpgrade conmonUpgrade buildah-testsUpgrade podman-dockerUpgrade crunUpgrade container-selinuxUpgrade podman-gvproxyUpgrade aardvark-dnsUpgrade fuse-overlayfsUpgrade python3-criuUpgrade cockpit-podmanUpgrade libslirpUpgrade python3-podmanUpgrade buildahUpgrade podman-testsUpgrade criuUpgrade runcUpgrade podman-remoteUpgrade criu-develUpgrade containernetworking-pluginsUpgrade netavarkUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hookUpgrade podman-catatonitUpgrade libslirp-develUpgrade podmanUpgrade containers-commonUpgrade critUpgrade skopeo-testsUpgrade criu-libsUpgrade skopeo | Jul 9, 2025 | Jun 24, 2025 |
| Redhat Openshift | — | Upgrade podmanUpgrade rhcos | Aug 10, 2026 | Jun 24, 2025 |
| Redhat_linux | — | Upgrade fuse-overlayfsUpgrade conmon-debugsourceUpgrade buildah-debuginfoUpgrade libslirpUpgrade conmonUpgrade criuUpgrade python3-podmanUpgrade fuse-overlayfs-debugsourceUpgrade crun-debugsourceUpgrade podman-catatonit-debuginfoUpgrade buildah-tests-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade buildahUpgrade slirp4netnsUpgrade libslirp-develUpgrade containers-commonUpgrade containernetworking-plugins-debugsourceUpgrade crun-debuginfoUpgrade podman-catatonitUpgrade runc-debugsourceUpgrade skopeoUpgrade podman-gvproxyUpgrade aardvark-dnsUpgrade toolboxUpgrade buildah-testsUpgrade criu-debuginfoUpgrade criu-libsUpgrade criu-debugsourceUpgrade netavarkUpgrade toolbox-testsUpgrade podmanUpgrade fuse-overlayfs-debuginfoUpgrade cockpit-podmanUpgrade criu-develUpgrade container-selinuxUpgrade criu-libs-debuginfoUpgrade runcUpgrade toolbox-debuginfoUpgrade podman-testsUpgrade podman-tests-debuginfoUpgrade conmon-debuginfoUpgrade critUpgrade containernetworking-pluginsUpgrade toolbox-debugsourceUpgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade crunUpgrade podman-remoteUpgrade podman-dockerUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade slirp4netns-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade udicaUpgrade libslirp-debuginfoUpgrade podman-debugsourceUpgrade runc-debuginfoUpgrade podman-remote-debuginfoUpgrade skopeo-testsUpgrade podman-pluginsUpgrade containernetworking-plugins-debuginfoUpgrade python3-criuUpgrade libslirp-debugsourceUpgrade podman-plugins-debuginfoUpgrade buildah-debugsourceUpgrade podman-debuginfo | Jul 9, 2025 | Jun 24, 2025 |
| Rocky_linux | — | Upgrade oci-seccomp-bpf-hook-debugsourceUpgrade toolboxUpgrade netavarkUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netnsUpgrade crun-debuginfoUpgrade podman-remote-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonitUpgrade podman-testsUpgrade criuUpgrade runc-debuginfoUpgrade podman-debugsourceUpgrade podman-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade slirp4netns-debugsourceUpgrade podmanUpgrade libslirpUpgrade podman-catatonit-debuginfoUpgrade podman-gvproxyUpgrade skopeo-testsUpgrade skopeoUpgrade libslirp-debugsourceUpgrade conmonUpgrade criu-develUpgrade crunUpgrade podman-tests-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildah-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade libslirp-develUpgrade buildah-tests-debuginfoUpgrade aardvark-dnsUpgrade fuse-overlayfs-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfsUpgrade criu-debugsourceUpgrade critUpgrade conmon-debugsourceUpgrade slirp4netns-debuginfoUpgrade criu-libsUpgrade libslirp-debuginfoUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade buildahUpgrade toolbox-testsUpgrade toolbox-debuginfoUpgrade runcUpgrade criu-debuginfoUpgrade podman-debuginfoUpgrade criu-libs-debuginfoUpgrade buildah-debuginfoUpgrade toolbox-debugsourceUpgrade runc-debugsourceUpgrade podman-remoteUpgrade crun-debugsourceUpgrade conmon-debuginfoUpgrade python3-criuUpgrade podman-plugins-debuginfoUpgrade buildah-tests | Feb 5, 2026 | Jul 29, 2025 |
| Suse | — | Upgrade podmanshUpgrade govulncheck-vulndbUpgrade podmanUpgrade podman-remoteUpgrade podman-docker | Aug 19, 2025 | Jul 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub