Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2024:6194
HistorySep 03, 2024 - 5:31 a.m.

(RHSA-2024:6194) Important: podman security update

2024-09-0305:31:21
access.redhat.com
podman tool
security update
containers
kubernetes
cve
golang
go-retryablehttp
gorilla/schema

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

8.4

Confidence

High

JSON

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.

Security Fix(es):

  • golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783)

  • go-retryablehttp: url might write sensitive information to log file (CVE-2024-6104)

  • gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization (CVE-2024-37298)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9s390xpodman-remote-debuginfo< 4.9.4-10.el9_4podman-remote-debuginfo-4.9.4-10.el9_4.s390x.rpm
RedHat9x86_64podman-debugsource< 4.9.4-10.el9_4podman-debugsource-4.9.4-10.el9_4.x86_64.rpm
RedHat9x86_64podman< 4.9.4-10.el9_4podman-4.9.4-10.el9_4.x86_64.rpm
RedHat9x86_64podman-plugins-debuginfo< 4.9.4-10.el9_4podman-plugins-debuginfo-4.9.4-10.el9_4.x86_64.rpm
RedHat9s390xpodman-debuginfo< 4.9.4-10.el9_4podman-debuginfo-4.9.4-10.el9_4.s390x.rpm
RedHat9s390xpodman-remote< 4.9.4-10.el9_4podman-remote-4.9.4-10.el9_4.s390x.rpm
RedHat9ppc64lepodman-remote-debuginfo< 4.9.4-10.el9_4podman-remote-debuginfo-4.9.4-10.el9_4.ppc64le.rpm
RedHat9s390xpodman-plugins-debuginfo< 4.9.4-10.el9_4podman-plugins-debuginfo-4.9.4-10.el9_4.s390x.rpm
RedHat9x86_64podman-remote< 4.9.4-10.el9_4podman-remote-4.9.4-10.el9_4.x86_64.rpm
RedHat9ppc64lepodman-plugins< 4.9.4-10.el9_4podman-plugins-4.9.4-10.el9_4.ppc64le.rpm
Rows per page:
1-10 of 331

Related

almalinux 2
oraclelinux 2
osv 134
nessus 16
redhat 9
ubuntucve 1
cve 2
wolfi 2
cvelist 1
nvd 2
cbl_mariner 14
vulnrichment 2
debiancve 2
redhatcve 2
veracode 2
github 2
rocky 1
openvas 2
redos 1
almalinux
almalinux
Important: podman security update
2024-09-03 00:00:00
Important: container-tools:rhel8 security update
2024-08-13 00:00:00
oraclelinux
oraclelinux
podman security update
2024-09-03 00:00:00
container-tools:ol8 security update
2024-08-13 00:00:00
osv
osv
Important: podman security update
2024-09-03 00:00:00
Potential memory exhaustion attack due to sparse slice deserialization
2024-07-01 20:35:12
CGA-8x9p-h548-675r
2024-07-15 21:54:58
nessus
nessus
RHEL 9 : podman (RHSA-2024:6194)
2024-09-03 00:00:00
Oracle Linux 9 : podman (ELSA-2024-6194)
2024-09-03 00:00:00
AlmaLinux 9 : podman (ALSA-2024:6194)
2024-09-04 00:00:00
redhat
redhat
(RHSA-2024:4858) Moderate: OpenShift Container Platform 4.16.5 packages and security update
2024-07-31 13:10:01
(RHSA-2024:4963) Moderate: OpenShift Container Platform 4.14.34 security update
2024-08-07 13:19:50
(RHSA-2024:5194) Important: container-tools:rhel8 security update
2024-08-12 00:56:26
ubuntucve
ubuntucve
CVE-2024-37298
2024-07-01 00:00:00
cve
cve
CVE-2024-37298
2024-07-01 19:15:04
CVE-2024-6104
2024-06-24 17:15:11
wolfi
wolfi
CVE-2024-37298 vulnerabilities
2024-09-19 09:11:50
CVE-2024-6104 vulnerabilities
2024-09-19 09:11:50
cvelist
cvelist
CVE-2024-37298 Potential memory exhaustion attack due to sparse slice deserialization
2024-07-01 18:27:33
nvd
nvd
CVE-2024-37298
2024-07-01 19:15:04
CVE-2024-6104
2024-06-24 17:15:11
cbl_mariner
cbl_mariner
CVE-2024-37298 affecting package libcontainers-common for versions less than 20240213-2
2024-07-23 02:21:02
CVE-2024-37298 affecting package telegraf for versions less than 1.29.4-7
2024-07-18 16:30:05
CVE-2024-37298 affecting package libcontainers-common for versions less than 20210626-4
2024-08-05 03:22:58
vulnrichment
vulnrichment
CVE-2024-37298 Potential memory exhaustion attack due to sparse slice deserialization
2024-07-01 18:27:33
CVE-2024-6104 go-retryablehttp can leak basic auth credentials to log files
2024-06-24 17:06:21
debiancve
debiancve
CVE-2024-37298
2024-07-01 19:15:04
CVE-2024-6104
2024-06-24 17:15:11
redhatcve
redhatcve
CVE-2024-37298
2024-07-02 15:56:45
CVE-2024-6104
2024-06-24 21:50:10
veracode
veracode
Denial Of Service (DoS)
2024-07-02 06:16:54
Information Disclosure
2024-06-25 05:18:18
github
github
Potential memory exhaustion attack due to sparse slice deserialization
2024-07-01 20:35:12
go-retryablehttp can leak basic auth credentials to log files
2024-06-24 18:31:37
rocky
rocky
container-tools:rhel8 security update
2024-08-21 14:52:31
openvas
openvas
openSUSE: Security Advisory for podman (SUSE-SU-2024:2273-1)
2024-07-10 00:00:00
openSUSE: Security Advisory for podman (SUSE-SU-2024:2286-1)
2024-07-10 00:00:00
redos
redos
ROS-20240902-12
2024-09-02 00:00:00

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

8.4

Confidence

High

JSON
Related for RHSA-2024:6194
almalinux2oraclelinux2osv134nessus16redhat9ubuntucve1cve2wolfi2cvelist1nvd2cbl_mariner14vulnrichment2debiancve2redhatcve2veracode2github2rocky1openvas2redos1