Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2025-11395

Опубликовано: 15 сент. 2026
Источник: debian
EPSS Низкий

Описание

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command, they can create files on the host machine with the privileges of the user running Podman.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
podmanunfixedpackage

Примечания

  • https://bugzilla.redhat.com/show_bug.cgi?id=2402034

EPSS

Процентиль: 31%
0.0038
Низкий

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 1 месяца назад

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command, they can create files on the host machine with the privileges of the user running Podman.

CVSS3: 5.5
redhat
12 месяцев назад

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command, they can create files on the host machine with the privileges of the user running Podman.

CVSS3: 5.5
nvd
около 1 месяца назад

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command, they can create files on the host machine with the privileges of the user running Podman.

CVSS3: 5.5
github
около 1 месяца назад

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command, they can create files on the host machine with the privileges of the user running Podman.

rocky
3 дня назад

Important: buildah security update

EPSS

Процентиль: 31%
0.0038
Низкий