libpod project libpod vulnerabilities and exploits

(subscribe to this query)

A flaw was found in podman. The `podman machine` function (used to create and manage Podman virtual machine containing a Podman process) spawns a `gvproxy` process on the host system. The `gvproxy` API is accessible on port 7777 on all IP addresses on the host. If that port is op...

Podman Project Podman Fedoraproject Fedora 34 Fedoraproject Fedora 35 Redhat Enterprise Linux 8.0

A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby (Docker Engine), where containers were started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attack...

Podman Project Podman Redhat Enterprise Linux 8.0 Redhat Developer Tools 1.0 Redhat Openshift Container Platform 4.0 Redhat Enterprise Linux Server Tus 8.4 Redhat Enterprise Linux Eus 8.4 Redhat Enterprise Linux Server Aus 8.4 Redhat Enterprise Linux Server Update Services For Sap Solutions 8.4 Redhat Enterprise Linux For Power Little Endian 8.0 Redhat Enterprise Linux For Ibm Z Systems Eus 8.4 Redhat Enterprise Linux For Ibm Z Systems 8.0 Redhat Enterprise Linux For Power Little Endian Eus 8.4 Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.4 Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.6 Redhat Enterprise Linux Server Update Services For Sap Solutions 8.6 Redhat Enterprise Linux For Ibm Z Systems 8.6 Redhat Enterprise Linux For Ibm Z Systems Eus 8.6 Redhat Enterprise Linux Server Aus 8.6 Redhat Enterprise Linux Server Tus 8.6 Redhat Enterprise Linux Eus 8.6 Redhat Enterprise Linux 8.6 Fedoraproject Fedora 34

A flaw exists in Podman where it incorrectly allows containers when created to overwrite existing files in volumes, even if they are mounted as read-only. When a user runs a malicious container or a container based on a malicious image with an attached volume that is used for the...

Libpod Project Libpod 1.6.0 Redhat Enterprise Linux 8.0 Redhat Openshift Container Platform 4.3

An issue exists in Podman in libpod prior to 1.6.0. It resolves a symlink in the host context during a copy operation from the container to the host, because an undesired glob operation occurs. An attacker could create a container image containing particular symlinks that, when c...

Libpod Project Libpod

The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift Container Platform, does not enforce TLS connections to the container registry authorization service. An attacker could use this vulne...

Buildah Project Buildah -Libpod Project Libpod -Redhat Openshift Container Platform 4.1 Skopeo Project Skopeo -Redhat Enterprise Linux 8.0 Opensuse Leap 15.1

A path traversal vulnerability has been discovered in podman before version 1.4.0 in the way it handles symlinks inside containers. An attacker who has compromised an existing container can cause arbitrary files on the host filesystem to be read/written when an administrator trie...

Libpod Project Libpod Opensuse Leap 15.1

A Time-of-check Time-of-use (TOCTOU) flaw was found in podman. This issue may allow a malicious user to replace a normal file in a volume with a symlink while exporting the volume, allowing for access to arbitrary files on the host file system.

Podman Project Podman -Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the s...

Golang Go Golang Http2 Fedoraproject Fedora 37 Fedoraproject Fedora 38

1 Github repository

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissio...

Podman Project Podman Redhat Enterprise Linux 7.0 Redhat Openshift Container Platform 3.11 Redhat Enterprise Linux 8.0 Redhat Openshift Container Platform 4.0 Redhat Enterprise Linux 9.0

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook