2865 matches found
USN-6295-1: Podman vulnerability
It was discovered that Podman incorrectly handled certain supplementary groups. An attacker could possibly use this issue to expose sensitive information or execute binary code...
Ubuntu 22.04 LTS : Podman vulnerability (USN-6295-1)
The remote Ubuntu 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-6295-1 advisory. It was discovered that Podman incorrectly handled certain supplementary groups. An attacker could possibly use this issue to expose sensitive information or execu...
AZL-43555 CVE-2023-3978 affecting package podman 4.1.1-26
Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack...
AZL-44055 CVE-2023-3978 affecting package podman for versions less than 5.6.1-2
Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack...
The vulnerability of the Podman software for managing and starting OCI containers on operating systems such as Red Hat Enterprise Linux, RedOS, and the corporate platform Red Hat OpenShift Container Platform allows a attacker to gain access to arbitrary files in the host’s file system.
The vulnerability of the Podman software for managing and starting OCI containers on Red Hat Enterprise Linux, RedOS, and the corporate platform Red Hat OpenShift Container Platform is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a malicio...
The vulnerability of the Podman software for managing and running OCI containers on operating systems such as Red Hat Enterprise Linux, RedOS, and the corporate platform Red Hat OpenShift Container Platform allows attackers to circumvent security restrictions and gain increased privileges.
The vulnerability of the Podman software for managing and running OCI containers on Red Hat Enterprise Linux, RedOS, and the Red Hat OpenShift Container Platform operating systems is related to errors in the use of standard permissions. Exploiting this vulnerability allows a malicious actor to...
Critical Photon OS Security Update - PHSA-2023-4.0-0429
Updates of 'podman', 'fuse-overlayfs-snapshotter', 'bindutils' packages of Photon OS have been released...
Critical Photon OS Security Update - PHSA-2023-5.0-91-0049
Updates of 'flannel', 'curl', 'podman', 'kubernetes', 'calico', 'redis' packages of Photon OS have been released...
Critical Photon OS Security Update - PHSA-2023-5.0-0049
Updates of 'curl', 'redis', 'podman', 'flannel', 'kubernetes', 'calico' packages of Photon OS have been released...
The vulnerability of the virtualization management tool used in the Podman-machine software for managing and launching OCI containers allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Podman-machine management tool, a software solution for managing and starting OCI containers, relates to insufficient protection of sensitive data due to the redirection of host ports to virtual machine ports during the process of mapping ports using gvproxy. Exploiting...
The vulnerability of the `podman top` command implementation in the software for managing and launching OCI containers on Red Hat Enterprise Linux, RedOS, and the corporate platform Red Hat OpenShift Container Platform allows a malicious individual to gain unauthorized access to protected information, increase their privileges, or cause service failures.
The vulnerability of the podman top command in the software for managing and starting OCI containers on Red Hat Enterprise Linux, RedOS, and the corporate platform Red Hat OpenShift Container Platform is related to the loading of a malicious image into the public registry due to incorrect access...
ROS-20230710-01
A vulnerability in Podman software is related to a type mixing error. Exploitation of the vulnerability could allow an attacker acting remotely to send specially crafted data to the application, cause a type-mixing error, and reinterpret the resulting content differently. The Podman software...
Updated skopeo/buildah/podman packages fix security vulnerability
Information disclosure flaw was found in Buildah CVE-2021-3602 podman allows forwarding hosts ports to vm from within vm CVE-2021-4024 Allows use "../" separators in containernetworking/cni to reference binaries such as 'reboot' in network configuration CVE-2021-20206 github.com/containers/storag...
podman: possible information disclosure and modification
An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to...
Ubuntu: Security Advisory (USN-6170-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-6170-1: Podman vulnerabilities
It was discovered that Podman incorrectly handled certain images. An attacker could possibly use this issue to pull an untrusted image...
USN-6170-1 libpod vulnerabilities
It was discovered that Podman incorrectly handled certain images. An attacker could possibly use this issue to pull an untrusted image...
Ubuntu 22.04 LTS : Podman vulnerabilities (USN-6170-1)
The remote Ubuntu 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-6170-1 advisory. It was discovered that Podman incorrectly handled certain images. An attacker could possibly use this issue to pull an untrusted image. Tenable has extracted the...
fuse-overlayfs bug fix and enhancement update
An update is available for fuse-overlayfs. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The fuse-overlayfs package provides an overlayfs FUSE implementation,...
