Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6jv9-mhj9-v2h4

Опубликовано: 16 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman.

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman.

EPSS

Процентиль: 31%
0.0038
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-277

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 1 месяца назад

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command, they can create files on the host machine with the privileges of the user running Podman.

CVSS3: 5.5
redhat
12 месяцев назад

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command, they can create files on the host machine with the privileges of the user running Podman.

CVSS3: 5.5
nvd
около 1 месяца назад

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command, they can create files on the host machine with the privileges of the user running Podman.

CVSS3: 5.5
debian
около 1 месяца назад

A flaw was found in Podman. If an attacker can pass a crafted tar arch ...

oracle-oval
4 дня назад

ELSA-2026-88262: buildah security update (IMPORTANT)

EPSS

Процентиль: 31%
0.0038
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-277