ROS-20230710-01

A vulnerability in Podman software is related to a type mixing error. Exploitation of the vulnerability
could allow an attacker acting remotely to send specially crafted data to the application,
cause a type-mixing error, and reinterpret the resulting content differently.

The Podman software vulnerability involves a race condition where an attacker can
replace a regular file in a volume with a symbolic link when exporting the volume. Exploitation of the vulnerability could
allow an attacker acting remotely to access arbitrary files in the file system of a
of the host.

The vulnerability in the Podman software is related to redundant data output by the application in the function
“podman machine.” Exploitation of the vulnerability could allow an attacker acting remotely to gain
unauthorized access to sensitive information on the system.

A vulnerability in the Podman software is associated with a redundant set of inherited capabilities.
Exploitation of the vulnerability could allow an attacker acting remotely to bypass security restrictions and privilege escalation.
security restrictions and privilege escalation.

The vulnerability in the Podman software is due to improper privilege management when running the
podman top in a container created from a malicious image and using the namespace of the
user namespace. Exploitation of the vulnerability could allow an attacker acting remotely to cause a
disclosure of information or denial of service.