Описание
A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem, leading to information disclosure or denial of service.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 8 | container-tools:2.0/podman | Affected | ||
| Red Hat Enterprise Linux 8 | container-tools:4.0/conmon | Not affected | ||
| Red Hat Enterprise Linux 8 | container-tools:4.0/podman | Not affected | ||
| Red Hat Enterprise Linux 9 | conmon | Not affected | ||
| Red Hat Enterprise Linux 9 | podman | Not affected | ||
| Red Hat OpenShift Container Platform 4 | cri-o | Under investigation | ||
| Red Hat OpenShift Container Platform 4 | openshift4/cnf-tests-rhel8 | Affected | ||
| Red Hat OpenShift Container Platform 4 | openshift4/file-integrity-rhel8-operator | Affected | ||
| Red Hat OpenShift Container Platform 4 | openshift4/ose-machine-config-operator | Not affected | ||
| Red Hat Quay 3 | quay/quay-builder-rhel8 | Affected |
Показывать по
Дополнительная информация
Статус:
8 High
CVSS3
Связанные уязвимости
A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem, leading to information disclosure or denial of service.
A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem, leading to information disclosure or denial of service.
A privilege escalation flaw was found in Podman. This flaw allows an a ...
8 High
CVSS3