Lucene search
K

podman: Improper symlink resolution allows access to host files when executing `podman cp` on running containers

🗓️ 29 Jul 2019 16:18:10Reported by RedHatType 
redhat
 redhat
🔗 access.redhat.com👁 6 Views

Podman symlink resolution flaw enables host file read/write via podman cp on running containers.

Related
Packages
Refs
ReporterTitlePublishedViews
Family
CVE
CVE-2019-10152
30 Jul 201922:07
cve
Cvelist
CVE-2019-10152
30 Jul 201922:07
cvelist
Debian CVE
CVE-2019-10152
30 Jul 201922:07
debiancve
EUVD
EUVD-2022-5173
3 Oct 202520:07
euvd
Fedora
[SECURITY] Fedora 29 Update: podman-1.4.0-2.fc29
15 Jun 201901:22
fedora
Fedora
[SECURITY] Fedora 30 Update: podman-1.4.0-1.fc30
12 Jun 201900:46
fedora
Fedora
[SECURITY] Fedora 30 Update: podman-1.4.0-2.fc30
12 Jun 201914:48
fedora
Tenable Nessus
Fedora 30 : 2:podman (2019-0937bbf558)
12 Jun 201900:00
nessus
Tenable Nessus
Fedora 30 : 2:podman (2019-886b4d2fb6)
13 Jun 201900:00
nessus
Tenable Nessus
Fedora 29 : 2:podman (2019-b66d704846)
17 Jun 201900:00
nessus
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Red Hat Enterprise Linux7aarch64podman0:1.4.4-2.el7podman-0:1.4.4-2.el7.aarch64.rpm
Red Hat Enterprise Linux7ppc64lepodman0:1.4.4-2.el7podman-0:1.4.4-2.el7.ppc64le.rpm
Red Hat Enterprise Linux7s390xpodman0:1.4.4-2.el7podman-0:1.4.4-2.el7.s390x.rpm
Red Hat Enterprise Linux7x86_64podman0:1.4.4-2.el7podman-0:1.4.4-2.el7.x86_64.rpm
Red Hat Enterprise Linux7aarch64podman-debuginfo0:1.4.4-2.el7podman-debuginfo-0:1.4.4-2.el7.aarch64.rpm
Red Hat Enterprise Linux7ppc64lepodman-debuginfo0:1.4.4-2.el7podman-debuginfo-0:1.4.4-2.el7.ppc64le.rpm
Red Hat Enterprise Linux7s390xpodman-debuginfo0:1.4.4-2.el7podman-debuginfo-0:1.4.4-2.el7.s390x.rpm
Red Hat Enterprise Linux7x86_64podman-debuginfo0:1.4.4-2.el7podman-debuginfo-0:1.4.4-2.el7.x86_64.rpm
Red Hat Enterprise Linux7anypodman-docker0:1.4.4-2.el7podman-docker-0:1.4.4-2.el7.noarch.rpm

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

20 Feb 2026 19:40Current
5.8Medium risk
Vulners AI Score5.8
CVSS 22.6
CVSS 3.17.2
CVSS 37.5
EPSS0.0046
6