Lucene search
RedHatRHSA-2024:5634HistoryAug 20, 2024 - 3:39 p.m.
(RHSA-2024:5634) Important: podman security update
2024-08-2015:39:15
CWE-770
access.redhat.com
6
podman tool
container pods
security update
kubernetes
cve-2024-1394
cve-2024-6104
cve-2024-37298
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
8
Confidence
High
The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.
Security Fix(es):
-
golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)
-
go-retryablehttp: url might write sensitive information to log file (CVE-2024-6104)
-
gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization (CVE-2024-37298)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected configurations
Node
redhatnetwork_observability_operatorRange≤0.4.1-18
ORredhatnetwork_observability_operatorRange≤v0.4.1-4
ORredhatnetwork_observability_operatorRange≤v0.77.1-1
ORredhatnetwork_observability_operatorRange≤v0.2.0-15
ORredhatopenshift_distributed_tracingRange≤v0.1.0-16
ORredhatnetwork_observability_operatorRange≤v6.0.0-20
ORredhatnetwork_observability_operatorRange≤v0.1.0-19
ORredhatnetwork_observability_operatorRange≤v0.6.3-15
ORredhatnetwork_observability_operatorRange≤v0.27.0-4
ORredhatnetwork_observability_operatorRange≤v0.77.1-1
ORredhatnetwork_observability_operatorRange≤v2.54.1-1
ORredhatnetwork_observability_operatorRange≤v0.77.1-1
ORredhatnetwork_observability_operatorRange≤v0.36.1-1
ORredhatmulticluster-engine\/hive-rhel8Range≤v2.5.7-1
ORredhatadvanced_cluster_securityRange≤4.4.5-2
ORredhatadvanced_cluster_securityRange≤4.4.5-2
ORredhatadvanced_cluster_securityRange≤4.4.5-2
ORredhatadvanced_cluster_securityRange≤4.4.5-4
ORredhatadvanced_cluster_securityRange≤4.4.5-3
ORredhatadvanced_cluster_securityRange≤4.4.5-2
ORredhatadvanced_cluster_securityRange≤4.4.5-2
ORredhatadvanced_cluster_securityRange≤4.4.5-2
ORredhatadvanced_cluster_securityRange≤4.4.5-3
ORredhatadvanced_cluster_securityRange≤4.4.5-2
ORredhatadvanced_cluster_securityRange≤4.4.5-2
ORredhatadvanced_cluster_securityRange≤4.4.5-3
ORredhatadvanced_cluster_securityRange≤4.4.5-3
ORredhatcontainer-toolsRange≤rhel8-8100020240808093819.afee755d
ORredhatcontainer-toolsRange≤rhel8-8080020240724065004.0f77c1b7
ORredhatpodmanRange≤4.9.4-10.el9_4
ORredhatskopeoRange≤1.16.1-1.el9
ORredhatgrafanaRange≤10.2.6-4.el9
ORredhatpodman-2Range≤4.4.1-20.el9_2
ORredhatopenshift4\/ose-sriov-network-webhookRange≤v4.12.0-202408091241.p0.g83b800f.assembly.stream.el8
ORredhatopenshift4\/ose-cloud-credential-operatorRange≤v4.12.0-202408072203.p0.g6de9c4e.assembly.stream.el8
ORredhatcluster_projectRange≤v4.12.0-202408071159.p0.g77fd1a9.assembly.stream.el8
ORredhatopenshift4\/ose-ibm-vpc-block-csi-driver-operator-rhel8Range≤v4.12.0-202408071159.p0.gf2b726d.assembly.stream.el8
ORredhatopenshift4\/ose-ibm-vpc-block-csi-driver-rhel8Range≤v4.12.0-202408071159.p0.g921509f.assembly.stream.el8
ORredhatcluster_projectRange≤v4.12.0-202408220304.p0.ga1b2a37.assembly.stream.el8
ORredhatopenshift4\/ose-installerRange≤v4.12.0-202409040731.p0.g798aeaa.assembly.stream.el8
ORredhatopenshift4\/ose-cloud-credential-operatorRange≤v4.13.0-202407192107.p0.g73ecd48.assembly.stream.el8
ORredhatcluster_projectRange≤v4.13.0-202407221409.p0.g19ee668.assembly.stream.el8
ORredhatopenshift4\/ose-ibm-vpc-block-csi-driver-operator-rhel8Range≤v4.13.0-202407182339.p0.g4c23f81.assembly.stream.el8
ORredhatopenshift4\/ose-ibm-vpc-block-csi-driver-rhel8Range≤v4.13.0-202407182137.p0.g54aaeff.assembly.stream.el8
ORredhatopenshift4\/ose-ibm-vpc-node-label-updater-rhel8Range≤v4.13.0-202407221109.p0.gb819827.assembly.stream.el8
ORredhatcluster_projectRange≤v4.13.0-202408131940.p0.g3f757a8.assembly.stream.el8
ORredhatopenshift4\/ose-powervs-block-csi-driver-rhel8Range≤v4.13.0-202408131940.p0.g16fa555.assembly.stream.el8
ORredhatpodman-3Range≤4.4.1-12.rhaos4.13.el8
ORredhatopenshift4\/ose-installerRange≤v4.13.0-202408280339.p0.g1b2041c.assembly.stream.el8
ORredhatopenshift4\/ose-hypershift-rhel8Range≤v4.13.0-202409142105.p0.g6daddee.assembly.stream.el8
ORredhatcluster_projectRange≤v4.14.0-202407041041.p0.g5e20c16.assembly.stream.el8
ORredhatopenshift4\/ose-cloud-credential-operatorRange≤v4.14.0-202407301840.p0.g7a5d12e.assembly.stream.el8
ORredhatopenshift4\/ose-ibm-vpc-block-csi-driver-operator-rhel8Range≤v4.14.0-202407120310.p0.g620220e.assembly.stream.el8
ORredhatopenshift4\/ose-ibm-vpc-block-csi-driver-rhel8Range≤v4.14.0-202407161139.p0.gea2bc15.assembly.stream.el8
ORredhatopenshift4\/ose-ibm-vpc-node-label-updater-rhel8Range≤v4.14.0-202407191039.p0.gda6823b.assembly.stream.el8
ORredhatpodman-3Range≤4.4.1-16.4.rhaos4.14.el9
ORredhatcluster_projectRange≤v4.14.0-202408081241.p0.g8c2203f.assembly.stream.el8
ORredhatopenshift4\/ose-powervs-block-csi-driver-rhel8Range≤v4.14.0-202408081513.p0.g988f710.assembly.stream.el8
ORredhatopenshift4\/ose-installerRange≤v4.14.0-202409031910.p0.ga8c1414.assembly.stream.el8
ORredhatopenshift4\/ose-hypershift-rhel8Range≤v4.14.0-202409250538.p0.gd8f8831.assembly.stream.el8
ORredhatopenshift4\/ose-cloud-credential-operatorRange≤v4.15.0-202407181606.p0.gf8455ca.assembly.stream.el8
ORredhatopenshift4\/ose-ibm-vpc-block-csi-driver-operator-rhel8Range≤v4.15.0-202407111437.p0.gdf0f1f6.assembly.stream.el8
ORredhatopenshift4\/ose-ibm-vpc-block-csi-driver-rhel9Range≤v4.15.0-202407151106.p0.g81877ac.assembly.stream.el9
ORredhatopenshift4\/ose-ibm-vpc-node-label-updater-rhel9Range≤v4.15.0-202407160936.p0.g5d72ced.assembly.stream.el9
ORredhatpodman-3Range≤4.4.1-26.2.rhaos4.15.el9
ORredhatopenshift4\/ose-installerRange≤v4.15.0-202408060439.p0.g950491f.assembly.stream.el8
ORredhatopenshift4\/ose-powervs-block-csi-driver-rhel9Range≤v4.15.0-202408060439.p0.g38bee56.assembly.stream.el9
ORredhatcluster_projectRange≤v4.15.0-202407020237.p0.g44832d2.assembly.stream.el9
ORredhatcluster_projectRange≤v4.15.0-202407031137.p0.g8740a71.assembly.stream.el9
ORredhatopenshift4\/ose-hypershift-rhel9Range≤v4.15.0-202409041437.p0.gf2684bc.assembly.stream.el9
ORredhatpodman-4Range≤4.9.4-8.rhaos4.16.el8
ORredhatcluster_projectRange≤v4.16.0-202407030803.p0.ga81e3b3.assembly.stream.el9
ORredhatcluster_projectRange≤v4.16.0-202407030803.p0.g335c914.assembly.stream.el9
ORredhatopenshift4\/ose-ibm-vpc-block-csi-driver-rhel9Range≤v4.16.0-202407031636.p0.g32b4c00.assembly.stream.el9
ORredhatopenshift4\/ose-ibm-vpc-block-csi-driver-rhel9-operatorRange≤v4.16.0-202407031636.p0.g34fc9a4.assembly.stream.el9
ORredhatopenshift4\/ose-cloud-credential-rhel9-operatorRange≤v4.16.0-202407142206.p0.gfffc75d.assembly.stream.el9
ORredhatopenshift4\/ose-installer-rhel9Range≤v4.16.0-202407161505.p0.g41969e2.assembly.stream.el9
ORredhatopenshift4\/ose-powervs-cloud-controller-manager-rhel9Range≤v4.16.0-202407300708.p0.g20e6dc7.assembly.stream.el9
ORredhatopenshift4\/ose-prometheus-rhel9Range≤v4.16.0-202407261437.p0.gbc04420.assembly.stream.el9
ORredhatopenshift4\/ose-powervs-block-csi-driver-rhel9Range≤v4.16.0-202408010610.p0.g26162ba.assembly.stream.el9
ORredhatopenshift4\/ose-hypershift-rhel9Range≤v4.16.0-202408281556.p0.g469fb1e.assembly.stream.el9
ORredhatpodman-4Range≤5.2.0-2.rhaos4.17.el9
ORredhatskopeo-2Range≤1.16.0-2.rhaos4.17.el9
ORredhatopenshift_gitopsRange≤v1.12.6-2
ORredhatopenshift_gitopsRange≤v1.12.6-2
ORredhatopenshift_gitopsRange≤v1.12.6-2
ORredhatopenshift_gitopsRange≤v1.12.6-2
ORredhatopenshift_gitopsRange≤v1.12.6-2
ORredhatopenshift_gitopsRange≤v1.12.6-2
ORredhatopenshift_gitopsRange≤v1.12.6-2
ORredhatopenshift_gitopsRange≤v1.12.6-2
ORredhatopenshift_gitopsRange≤v1.12.6-2
ORredhatodf4\/cephcsi-rhel9Range≤v4.13.12-2
ORredhatodf4\/cephcsi-rhel9Range≤v4.14.11-2
ORredhatodf4\/mcg-rhel9-operatorRange≤v4.16.1-3
ORredhatodf4\/odf-cli-rhel9Range≤v4.16.1-3
ORredhatodf4\/odf-multicluster-rhel9-operatorRange≤v4.16.1-1
ORredhatodf4\/cephcsi-rhel9Range≤v4.16.2-2
ORredhatodf4\/odf-cli-rhel9Range≤v4.16.2-2
ORredhatcephRange≤v4.16.2-3
ORredhatopenshift_loggingRange≤v5.6.24-7
ORredhatopenshift_loggingRange≤v5.6.24-2
ORredhatopenshift_loggingRange≤v6.8.1-440
ORredhatopenshift_loggingRange≤v5.6.24-9
ORredhatopenshift_loggingRange≤v1.0.0-515
ORredhatopenshift_loggingRange≤v5.6.24-2
ORredhatopenshift_loggingRange≤v0.4.0-300
ORredhatopenshift_loggingRange≤v1.14.6-228
ORredhatopenshift_loggingRange≤v6.8.1-460
ORredhatopenshift_loggingRange≤v1.1.0-281
ORredhatopenshift_loggingRange≤v5.8.1-523
ORredhatopenshift_loggingRange≤v3.1.1-11
ORredhatopenshift_loggingRange≤v5.6.24-3
ORredhatopenshift_loggingRange≤v5.6.24-18
ORredhatopenshift_loggingRange≤v5.6.24-7
ORredhatopenshift_loggingRange≤v0.1.0-652
ORredhatopenshift_loggingRange≤v0.1.0-287
ORredhatopenshift_loggingRange≤v0.21.0-138
ORredhatopenshift_loggingRange≤v5.8.13-15
ORredhatopenshift_loggingRange≤v5.8.13-7
ORredhatopenshift_loggingRange≤v6.8.1-438
ORredhatopenshift_loggingRange≤v5.8.13-13
ORredhatopenshift_loggingRange≤v1.0.0-513
ORredhatopenshift_loggingRange≤v5.8.13-5
ORredhatopenshift_loggingRange≤v0.4.0-296
ORredhatopenshift_loggingRange≤v5.8.13-3
ORredhatopenshift_loggingRange≤v1.1.0-277
ORredhatopenshift_loggingRange≤v5.8.1-521
ORredhatopenshift_loggingRange≤v3.1.1-7
ORredhatopenshift_loggingRange≤v5.8.13-4
ORredhatopenshift_loggingRange≤v5.8.13-17
ORredhatopenshift_loggingRange≤v5.8.13-6
ORredhatopenshift_loggingRange≤v0.1.0-649
ORredhatopenshift_loggingRange≤v0.1.0-284
ORredhatopenshift_loggingRange≤v0.28.1-76
ORredhatopenshift_loggingRange≤v5.9.7-11
ORredhatopenshift_loggingRange≤v5.9.7-6
ORredhatopenshift_loggingRange≤v0.4.0-301
ORredhatopenshift_loggingRange≤v5.9.7-3
ORredhatopenshift_loggingRange≤v1.1.0-282
ORredhatopenshift_loggingRange≤v3.1.1-10
ORredhatopenshift_loggingRange≤v5.9.7-5
ORredhatopenshift_loggingRange≤v5.9.7-16
ORredhatopenshift_loggingRange≤v5.9.7-7
ORredhatopenshift_loggingRange≤v0.1.0-653
ORredhatopenshift_loggingRange≤v0.1.0-288
ORredhatopenshift_loggingRange≤v0.34.1-19
ORredhatopenshift_loggingRange≤v3.2.0-12
ORredhatopenshift_serverlessRange≤1.12.0-6
ORredhatopenshift_serverlessRange≤1.12.0-7
ORredhatopenshift_serverlessRange≤1.12.0-7
ORredhatopenshift_serverlessRange≤1.12.0-7
ORredhatopenshift_serverlessRange≤1.12.0-7
ORredhatopenshift_serverlessRange≤1.12.0-5
ORredhatopenshift_serverlessRange≤1.12.0-6
ORredhatopenshift_serverlessRange≤1.12.0-6
ORredhatopenshift_serverlessRange≤1.12.0-6
ORredhatopenshift_serverlessRange≤1.12.0-6
ORredhatopenshift_serverlessRange≤1.12.0-6
ORredhatopenshift_serverlessRange≤1.12.0-7
ORredhatopenshift_serverlessRange≤1.12.0-7
ORredhatopenshift_serverlessRange≤1.12.0-7
ORredhatopenshift_serverlessRange≤1.12.0-7
ORredhatopenshift_serverlessRange≤1.12.0-7
ORredhatopenshift_serverlessRange≤1.12.0-7
ORredhatopenshift_serverlessRange≤1.33.1-1
ORredhatopenshift_serverlessRange≤1.33.1-2
ORredhatopenshift_serverlessRange≤1.33.1-2
ORredhatopenshift_serverlessRange≤1.12.0-6
ORredhatopenshift_serverlessRange≤1.12.0-5
ORredhatopenshift_serverlessRange≤1.12.0-5
ORredhatopenshift_serverlessRange≤1.12.0-5
ORredhatopenshift_serverlessRange≤1.33.1-2
ORredhatopenshift_serverlessRange≤1.33.1-2
ORredhatopenshift_serverlessRange≤1.12.0-5
ORredhatopenshift_serverlessRange≤1.12.0-5
ORredhatopenshift_serverlessRange≤1.12.0-5
ORredhatopenshift_serverlessRange≤1.12.0-5
ORredhatopenshift_serverlessRange≤1.12.0-5
ORredhatopenshift_serverlessRange≤1.12.0-5
ORredhatopenshift_serverlessRange≤1.12.0-5
ORredhatopenshift_serverlessRange≤1.33.1-1
ORredhatopenshift_serverlessRange≤1.33.1-1
ORredhatopenshift_serverlessRange≤1.12.0-6
ORredhatreceptor-0Range≤1.4.5-1.el8ap
ORredhatreceptor-0Range≤1.4.5-1.el9ap
ORredhatgo-toolset-1.19-golang-0Range≤1.19.13-6.el7_9
ORredhatgo-toolsetRange≤rhel8-8090020240313170136.26eb71ac
ORredhatgrafana-pcpRange≤5.1.1-2.el8_9
ORredhatgrafanaRange≤9.2.10-8.el8_9
ORredhatgrafanaRange≤9.2.10-16.el8_10
ORredhatosbuild-composerRange≤101-2.el8_10
ORredhatgolangRange≤1.20.12-2.el9_3
ORredhatgrafanaRange≤9.2.10-8.el9_3
ORredhatgrafana-pcpRange≤5.1.1-2.el9_3
ORredhatgolangRange≤1.21.9-2.el9_4
ORredhatgrafanaRange≤9.2.10-16.el9_4
ORredhatgrafana-pcpRange≤5.1.1-2.el9_4
ORredhatbuildahRange≤1.33.7-3.el9_4
ORredhatpodmanRange≤4.9.4-5.el9_4
ORredhatgvisor-tap-vsockRange≤0.7.3-4.el9_4
ORredhatskopeoRange≤1.14.3-3.el9_4
ORredhatcontainernetworking-pluginsRange≤1.4.0-4.el9_4
ORredhatruncRange≤1.1.12-3.el9_4
ORredhatpodman-2Range≤4.2.0-4.el9_0
ORredhatcontainernetworking-plugins-1Range≤1.0.1-6.el9_0
ORredhatgolang-0Range≤1.19.13-7.el9_2
ORredhatbuildah-1Range≤1.23.4-5.2.rhaos4.12.el8
ORredhatbutane-0Range≤0.16.0-2.2.rhaos4.12.el8
ORredhatcontainernetworking-plugins-1Range≤1.4.0-1.1.rhaos4.12.el8
ORredhatcri-o-0Range≤1.25.3-5.2.rhaos4.12.git44a2cb2.el9
ORredhatcri-tools-0Range≤1.25.0-2.2.el9
ORredhatignitionRange≤2.14.0-7.1.rhaos4.12.el8
ORredhatopenshiftRange≤4.12.0-202403251017.p0.gd4c9e3c.assembly.stream.el8
ORredhatpodman-3Range≤4.4.1-2.1.rhaos4.12.el8
ORredhatrunc-3Range≤1.1.6-5.2.rhaos4.12.el8
ORredhatskopeo-2Range≤1.9.4-3.2.rhaos4.12.el8
ORredhatbuildah-1Range≤1.29.1-2.2.rhaos4.13.el8
ORredhatcontainernetworking-plugins-1Range≤1.4.0-1.1.rhaos4.13.el8
ORredhatcri-o-0Range≤1.26.5-11.1.rhaos4.13.git919cc6e.el9
ORredhatcri-tools-0Range≤1.26.0-4.1.el8
ORredhatignitionRange≤2.15.0-7.1.rhaos4.13.el9
ORredhatopenshiftRange≤4.13.0-202404020737.p0.gd192e90.assembly.stream.el9
ORredhatpodman-3Range≤4.4.1-5.2.rhaos4.13.el8
ORredhatrunc-4Range≤1.1.12-1.1.rhaos4.13.el8
ORredhatskopeo-2Range≤1.11.2-2.2.rhaos4.13.el9
ORredhatbutane-0Range≤0.19.0-1.3.rhaos4.14.el8
ORredhatcontainernetworking-plugins-1Range≤1.4.0-1.2.rhaos4.14.el8
ORredhatcri-o-0Range≤1.27.4-6.1.rhaos4.14.gitd09e4c0.el9
ORredhatcri-tools-0Range≤1.27.0-3.1.el9
ORredhatignitionRange≤2.16.2-2.1.rhaos4.14.el9
ORredhatopenshiftRange≤4.14.0-202403261640.p0.gf7b14a9.assembly.stream.el8
ORredhatose-aws-ecr-image-credential-provider-0Range≤4.14.0-202403251040.p0.g607e2dd.assembly.stream.el9
ORredhatpodman-3Range≤4.4.1-11.3.rhaos4.14.el8
ORredhatskopeo-2Range≤1.11.2-10.3.rhaos4.14.el8
ORredhatbuildah-1Range≤1.29.1-10.4.rhaos4.14.el8
ORredhatbutane-0Range≤0.19.0-1.4.rhaos4.14.el8
ORredhatconmon-3Range≤2.1.7-3.4.rhaos4.14.el8
ORredhatcontainernetworking-plugins-1Range≤1.4.0-1.3.rhaos4.14.el8
ORredhatcri-o-0Range≤1.27.4-7.2.rhaos4.14.git082c52f.el8
ORredhatcri-tools-0Range≤1.27.0-3.2.el9
ORredhatignitionRange≤2.16.2-2.2.rhaos4.14.el9
ORredhatopenshiftRange≤4.14.0-202404160939.p0.g7bee54d.assembly.stream.el9
ORredhatopenshift4-aws-iso-0Range≤4.14.0-202404151639.p0.gd2acdd5.assembly.stream.el8
ORredhatansibleRange≤4.14.0-202404151639.p0.g81558cc.assembly.stream.el8
ORredhatopenshiftRange≤4.14.0-202404151639.p0.gf7b14a9.assembly.stream.el9
ORredhatopenshiftRange≤4.14.0-202404151639.p0.g8926a29.assembly.stream.el8
ORredhatose-aws-ecr-image-credential-provider-0Range≤4.14.0-202404151639.p0.g607e2dd.assembly.stream.el9
ORredhatpodman-3Range≤4.4.1-11.4.rhaos4.14.el9
ORredhatrunc-4Range≤1.1.12-1.2.rhaos4.14.el8
ORredhatskopeo-2Range≤1.11.2-10.4.rhaos4.14.el8
ORredhatmicroshift-0Range≤4.14.19-202403280926.p0.gc1f8861.assembly.4.14.19.el9
ORredhatbuildah-1Range≤1.29.1-20.3.rhaos4.15.el8
ORredhatbutane-0Range≤0.20.0-1.1.rhaos4.15.el8
ORredhatcontainernetworking-plugins-1Range≤1.4.0-1.2.rhaos4.15.el8
ORredhatcri-o-0Range≤1.28.4-8.rhaos4.15.git24f50b9.el9
ORredhatcri-tools-0Range≤1.28.0-3.1.el9
ORredhatignitionRange≤2.16.2-2.1.rhaos4.15.el9
ORredhatopenshiftRange≤4.15.0-202403211240.p0.g62c4d45.assembly.stream.el8
ORredhatose-aws-ecr-image-credential-provider-0Range≤4.15.0-202403211549.p0.g2e3cca1.assembly.stream.el9
ORredhatpodman-3Range≤4.4.1-21.1.rhaos4.15.el8
ORredhatrunc-4Range≤1.1.12-1.1.rhaos4.15.el9
ORredhatskopeo-2Range≤1.11.2-21.2.rhaos4.15.el9
ORredhatmicroshift-0Range≤4.15.6-202403280951.p0.g94b1c2a.assembly.4.15.6.el9
ORredhatetcdRange≤3.3.23-16.el8ost
ORredhatcollectd-sensubility-0Range≤0.2.1-3.el8ost
ORredhatetcdRange≤3.4.26-8.el9ost
ORredhatcollectd-sensubility-0Range≤0.2.1-3.el9ost
ORredhatodf4\/mcg-operator-bundleRange≤v4.16.0-137
ORredhatodf4\/mcg-rhel9-operatorRange≤v4.16.0-38
ORredhatpodman-2Range≤4.2.0-5.el9_0
ORredhatpodman-3Range≤4.4.1-7.rhaos4.12.el8
ORredhatpodman-3Range≤4.4.1-10.3.rhaos4.13.el9
ORredhatpodman-3Range≤4.4.1-25.2.rhaos4.15.el8
redhatenterprise_linuxMatch8
ORredhatenterprise_linuxMatch9
| Vendor | Product | Version | CPE |
|---|---|---|---|
| redhat | network_observability_operator | * | cpe:2.3:a:redhat:network_observability_operator:*:*:*:*:*:*:*:* |
| redhat | openshift_distributed_tracing | * | cpe:2.3:a:redhat:openshift_distributed_tracing:*:*:*:*:*:*:*:* |
| redhat | multicluster-engine\/hive-rhel8 | * | cpe:2.3:a:redhat:multicluster-engine\/hive-rhel8:*:*:*:*:*:*:*:* |
| redhat | advanced_cluster_security | * | cpe:2.3:a:redhat:advanced_cluster_security:*:*:*:*:*:*:*:* |
| redhat | container-tools | * | cpe:2.3:a:redhat:container-tools:*:*:*:*:*:*:*:* |
| redhat | podman | * | cpe:2.3:a:redhat:podman:*:*:*:*:*:*:*:* |
| redhat | skopeo | * | cpe:2.3:a:redhat:skopeo:*:*:*:*:*:*:*:* |
| redhat | grafana | * | cpe:2.3:a:redhat:grafana:*:*:*:*:*:*:*:* |
| redhat | podman-2 | * | cpe:2.3:a:redhat:podman-2:*:*:*:*:*:*:*:* |
| redhat | openshift4\/ose-sriov-network-webhook | * | cpe:2.3:a:redhat:openshift4\/ose-sriov-network-webhook:*:*:*:*:*:*:*:* |
Related
nessus
nessus
RHEL 9 : podman (RHSA-2024:5634)
2024-08-20 00:00:00
RHEL 8 / 9 : OpenShift Container Platform 4.16.5 (RHSA-2024:4858)
2024-07-31 00:00:00
RHEL 8 / 9 : OpenShift Container Platform 4.14.34 (RHSA-2024:4963)
2024-08-07 00:00:00
osv
osv
Red Hat Security Advisory: podman security update
2024-10-01 11:04:41
Red Hat Security Advisory: OpenShift Container Platform 4.16.5 packages and security update
2024-10-01 11:03:03
Red Hat Security Advisory: container-tools:rhel8 security update
2024-10-21 16:50:23
redhat
redhat
almalinux
almalinux
Important: podman security update
2024-09-03 00:00:00
Important: container-tools:rhel8 security update
2024-08-13 00:00:00
Important: runc security update
2024-07-23 00:00:00
oraclelinux
oraclelinux
podman security update
2024-09-03 00:00:00
container-tools:ol8 security update
2024-08-13 00:00:00
grafana-pcp security and bug fix update
2024-04-03 00:00:00
cvelist
cvelist
cbl_mariner
cbl_mariner
CVE-2024-37298 affecting package libcontainers-common for versions less than 20240213-2
2024-07-23 02:21:02
CVE-2024-37298 affecting package libcontainers-common for versions less than 20210626-4
2024-08-05 03:22:58
CVE-2024-37298 affecting package telegraf for versions less than 1.31.0-2
2024-07-22 19:00:45
nvd
nvd
CVE-2024-37298
2024-07-01 19:15:04
CVE-2024-6104
2024-06-24 17:15:11
rocky
rocky
container-tools:rhel8 security update
2024-08-21 14:52:31
grafana-pcp security update
2024-05-10 14:32:42
skopeo security update
2024-07-26 12:33:59
vulnrichment
vulnrichment
debiancve
debiancve
CVE-2024-37298
2024-07-01 19:15:04
CVE-2024-6104
2024-06-24 17:15:11
ubuntucve
ubuntucve
CVE-2024-37298
2024-07-01 00:00:00
cve
cve
CVE-2024-37298
2024-07-01 19:15:04
wolfi
wolfi
CVE-2024-37298 vulnerabilities
2024-12-02 21:13:49
CVE-2024-6104 vulnerabilities
2024-12-02 21:13:49
veracode
veracode
Denial Of Service (DoS)
2024-07-02 06:16:54
Information Disclosure
2024-06-25 05:18:18
Memory Leak
2024-03-28 05:55:40
redhatcve
redhatcve
CVE-2024-37298
2024-07-02 15:56:45
CVE-2024-6104
2024-06-24 21:50:10
ibm
ibm
github
github
Potential memory exhaustion attack due to sparse slice deserialization
2024-07-01 20:35:12
openvas
openvas
openSUSE: Security Advisory for podman (SUSE-SU-2024:2273-1)
2024-07-10 00:00:00
redos
redos
ROS-20240902-12
2024-09-02 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
8
Confidence
High
Related for RHSA-2024:5634