Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-11395

Опубликовано: 15 сент. 2026
Источник: nvd
CVSS3: 5.5
EPSS Низкий

Описание

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman.

EPSS

Процентиль: 32%
0.0038
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-277

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 1 месяца назад

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command, they can create files on the host machine with the privileges of the user running Podman.

CVSS3: 5.5
redhat
12 месяцев назад

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command, they can create files on the host machine with the privileges of the user running Podman.

CVSS3: 5.5
debian
около 1 месяца назад

A flaw was found in Podman. If an attacker can pass a crafted tar arch ...

CVSS3: 5.5
github
около 1 месяца назад

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command, they can create files on the host machine with the privileges of the user running Podman.

rocky
3 дня назад

Important: buildah security update

EPSS

Процентиль: 32%
0.0038
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-277