Lucene search
+L

32 matches found

RedHat Linux
RedHat Linux
•added 2026/05/19 9:29 a.m.•25 views

podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

8.1CVSS7.5AI score0.01159EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2025/11/11 7:19 p.m.•17 views

podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

8.1CVSS7.5AI score0.01159EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2025/11/11 1:58 p.m.•16 views

podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

8.1CVSS7.5AI score0.01159EPSS
SaveExploits0References6
AstraLinux
AstraLinux
•added 2025/11/01 10:54 a.m.•7 views

Astra Linux – Vulnerability in libpod

There is a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file is stored in a Secret or a ConfigMap volume, and such volumes contain symbolic links to host file paths. In a successful attack, the attacker can control only the target...

8.1CVSS7.9AI score0.01159EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2025/10/16 11:03 a.m.•20 views

podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

8.1CVSS7.5AI score0.01159EPSS
SaveExploits0References6
osv_clsa
osv_clsa
•added 2025/10/03 3:35 p.m.•22 views

CLSA-2025-1759505734 podman: Fix of CVE-2025-9566

CVE-2025-9566: fix kube play vulnerability that allows following volume symlinks onto the host filesystem. Prevent symlink-based host escapes in ConfigMap and Secret volumes...

8.1CVSS7.4AI score0.01159EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2025/09/23 6:32 p.m.•21 views

podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

8.1CVSS7.5AI score0.01159EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2025/09/23 4:48 p.m.•32 views

podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

8.1CVSS7.5AI score0.01159EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2025/09/23 2:06 p.m.•17 views

podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

8.1CVSS7.5AI score0.01159EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2025/09/17 3:50 p.m.•14 views

podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

8.1CVSS7.5AI score0.01159EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2025/09/16 9:18 a.m.•18 views

podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

8.1CVSS7.5AI score0.01159EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2025/09/16 5:56 a.m.•19 views

podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

8.1CVSS7.5AI score0.01159EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2025/09/16 3:57 a.m.•18 views

podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

8.1CVSS7.5AI score0.01159EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2025/09/06 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2025-9566

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - libpod - There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a...

8.1CVSS7.4AI score0.01159EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/09/05 11:28 p.m.•16 views

SUSE CVE-2025-9566

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

8.1CVSS7.5AI score0.01159EPSS
SaveExploits0References19
NVD
NVD
•added 2025/09/05 8:15 p.m.•21 views

CVE-2025-9566

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

8.1CVSS0.01159EPSS
SaveExploits0References34
osv_azl
osv_azl
•added 2025/09/05 8:15 p.m.•25 views

AZL-67046 CVE-2025-9566 affecting package podman 4.1.1-26

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

8.1CVSS7.5AI score0.01159EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2025/09/05 8:15 p.m.•13 views

DEBIAN-CVE-2025-9566

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

8.1CVSS7.5AI score0.01159EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/09/05 8:15 p.m.•18 views

UBUNTU-CVE-2025-9566

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

8.1CVSS7.5AI score0.01159EPSS
SaveExploits0References4
CVE
CVE
•added 2025/09/05 7:54 p.m.•157 views

CVE-2025-9566

Vulnerability (CVE-2025-9566) affects the podman component. The issue arises when using the kube play command with a volume mount from a Secrete or a ConfigMap whose volume contains a symbolic link to a host file path; an attacker can cause the host file to be overwritten. The attack is limited t...

8.1CVSS7.5AI score0.01159EPSS
SaveExploits0References34
Rows per page
Query Builder