Denial Of Service (DoS)

podman is vulnerable to denial of service. The vulnerability exists due to lack of sanitization of user inputs allowing an attacker to crash the system...

Podman 安全漏洞

Podman is an engine for developing, managing, and running OCI containers on Linux systems. A security vulnerability exists in Podman that stems from the affected product incorrectly starting containers with non-empty default permissions...

PT-2021-7849 · Podman +7 · Podman +7

Name of the Vulnerable Software and Affected Versions: podman affected versions not specified Description: A flaw was found in podman. The podman machine function spawns a gvproxy process on the host system. The gvproxy API is accessible on port 7777 on all IP addresses on the host. If that port ...

The vulnerability of the podman package in the Red Hat Enterprise Linux operating system and the Red Hat OpenShift Container Platform corporate platform, related to uncontrolled resource consumption, allows a perpetrator to trigger a service failure.

The vulnerability of the podman package in the Red Hat Enterprise Linux operating system and the Red Hat OpenShift Container Platform corporate platform is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Oracle Linux 8 : container-tools:1.0 (ELSA-2021-0705)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-0705 advisory. - fix 'CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process' - rebuild because of CVE-2019-9512 and...

DEBIAN-CVE-2021-20188

A flaw was found in podman before 1.7.0. File permissions for non-root users running in a privileged container are not correctly checked. This flaw can be abused by a low-privileged user inside the container to access any other file in the container, even if owned by the root user inside the...

AZL-7329 CVE-2021-20199 affecting package podman for versions less than 4.1.1-1

Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 including from remote hosts. This impacts containerized applications that trust localhost 127.0.01 connections by default and do not require authentication. This issue affects Podman 1.8.0 onwards...

DEBIAN-CVE-2020-14370

An information disclosure vulnerability was found in containers/podman in versions before 2.0.5. When using the deprecated Varlink API or the Docker-compatible REST API, if multiple containers are created in a short duration, the environment variables from the first container will get leaked into...

AZL-44364 CVE-2020-14040 affecting package podman for versions less than 5.6.1-2

The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to...

The vulnerability of the Podman library’s software for managing and starting OCI containers allows a hacker to overwrite existing files.

The vulnerability of the Podman software for managing and starting OCI containers is related to errors in handling symbolic links. Exploiting this vulnerability could allow an attacker to re-write existing files...

PT-2020-14915 · Red Hat +4 · Podman +5

Name of the Vulnerable Software and Affected Versions: Podman versions 1.6.0 and later Description: A flaw was discovered in Podman where it incorrectly allows containers to overwrite existing files in volumes, even if they are mounted as read-only. This issue can be triggered when a user runs a...

AZL-44109 CVE-2018-20699 affecting package podman for versions less than 5.6.1-2

Docker Engine before 18.09 allows attackers to cause a denial of service dockerd memory consumption via a large integer in a --cpuset-mems or --cpuset-cpus value, related to daemon/daemonunix.go, pkg/parsers/parsers.go, and pkg/sysinfo/sysinfo.go...

podman elevation of privilege vulnerability

libpod is a library for running OCI-based containers in Pods. podman is one of the tools for managing Pods. A security vulnerability exists in podman 0.6.1 and earlier versions. An attacker can exploit the vulnerability to enable containers to gain elevated privileges...