Lucene search

CVE-2022-1227

🗓️ 29 Apr 2022 16:08:15Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 319 Views

Privilege escalation flaw in Podman, allows attacker to publish malicious image, trigger vulnerability via 'podman top' command, leading to information disclosure or denial of service

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 82
Prion	Information disclosure	29 Apr 202216:15	–	prion
Tenable Nessus	RHEL 8 : OpenShift Container Platform 4.6.58 (RHSA-2022:2263)	8 Sep 202200:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: podman (CVE-2022-1227)	28 Mar 202300:00	–	nessus
Tenable Nessus	RHEL 8 : container-tools:3.0 (RHSA-2022:2143)	11 May 202200:00	–	nessus
Tenable Nessus	Oracle Linux 8 : container-tools:3.0 (ELSA-2022-2143)	19 May 202200:00	–	nessus
Tenable Nessus	RHEL 7 : podman (RHSA-2022:2190)	12 May 202200:00	–	nessus
Tenable Nessus	CentOS 7 : podman (RHSA-2022:2190)	9 Oct 202400:00	–	nessus
Tenable Nessus	AlmaLinux 8 : container-tools:3.0 (ALSA-2022:2143)	12 May 202200:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2022-1227	5 Mar 202500:00	–	nessus
Tenable Nessus	Rocky Linux 8 : container-tools:3.0 (RLSA-2022:2143)	7 Nov 202300:00	–	nessus

Nvd

Vulners

Node

podman_project podmanRange<4.0.0

psgo_project psgoRange<1.7.2go

Node

redhat developer_toolsMatch1.0

redhat enterprise_linux_server_update_services_for_sap_solutionsMatch8.6

redhat openshift_container_platformMatch4.0

redhat quayMatch3.0.0

redhat enterprise_linuxMatch7.0

redhat enterprise_linuxMatch8.0

redhat enterprise_linux_eusMatch8.6

redhat enterprise_linux_for_ibm_z_systemsMatch7.0

redhat enterprise_linux_for_ibm_z_systemsMatch8.6

redhat enterprise_linux_for_power_little_endianMatch7.0

redhat enterprise_linux_for_power_little_endianMatch8.6

redhat enterprise_linux_serverMatch7.0

redhat enterprise_linux_server_ausMatch8.6

redhat enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsMatch8.6

redhat enterprise_linux_server_tusMatch8.6

redhat enterprise_linux_workstationMatch7.0

Node

fedoraproject fedoraMatch34

fedoraproject fedoraMatch35

[
  {
    "vendor": "n/a",
    "product": "psgo",
    "versions": [
      {
        "version": "podman 4.0, psgo 1.7.2",
        "status": "affected"
      }
    ]
  }
]

Source	Link
security	www.security.netapp.com/advisory/ntap-20240628-0001/
github	www.github.com/containers/podman/issues/10941
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DLUJZV3HBP56ADXU6QH2V7RNYUPMVBXQ/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

29 Apr 2022 16:15Current

8.3High risk

Vulners AI Score8.3

CVSS26.8

CVSS38.8

EPSS0.28418