Количество 16
Количество 16
CVE-2021-4024
A flaw was found in podman. The `podman machine` function (used to create and manage Podman virtual machine containing a Podman process) spawns a `gvproxy` process on the host system. The `gvproxy` API is accessible on port 7777 on all IP addresses on the host. If that port is open on the host's firewall, an attacker can potentially use the `gvproxy` API to forward ports on the host to ports in the VM, making private services on the VM accessible to the network. This issue could be also used to interrupt the host's services by forwarding all ports to the VM.
CVE-2021-4024
A flaw was found in podman. The `podman machine` function (used to create and manage Podman virtual machine containing a Podman process) spawns a `gvproxy` process on the host system. The `gvproxy` API is accessible on port 7777 on all IP addresses on the host. If that port is open on the host's firewall, an attacker can potentially use the `gvproxy` API to forward ports on the host to ports in the VM, making private services on the VM accessible to the network. This issue could be also used to interrupt the host's services by forwarding all ports to the VM.
CVE-2021-4024
A flaw was found in podman. The `podman machine` function (used to create and manage Podman virtual machine containing a Podman process) spawns a `gvproxy` process on the host system. The `gvproxy` API is accessible on port 7777 on all IP addresses on the host. If that port is open on the host's firewall, an attacker can potentially use the `gvproxy` API to forward ports on the host to ports in the VM, making private services on the VM accessible to the network. This issue could be also used to interrupt the host's services by forwarding all ports to the VM.
CVE-2021-4024
A flaw was found in podman. The `podman machine` function (used to cre ...
GHSA-3cf2-x423-x582
Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman
BDU:2023-03676
Уязвимость инструмента управления виртуализацией podman-machine программного средства управления и запуска OCI-контейнеров Podman, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
ALT-PU-2021-3549
ALT-PU-2021-3549: package `podman` update to version 3.4.3-alt2
RLSA-2024:10289
Moderate: container-tools:rhel8 security update
ELSA-2024-10289
ELSA-2024-10289: container-tools:ol8 security update (MODERATE)
ALT-PU-2021-3495
ALT-PU-2021-3495: package `podman` update to version 3.4.3-alt1
SUSE-SU-2023:0326-1
Security update for podman
SUSE-SU-2023:0187-1
Security update for podman
openSUSE-SU-2022:23018-1
Security update for conmon, libcontainers-common, libseccomp, podman
SUSE-SU-2022:23018-1
Security update for conmon, libcontainers-common, libseccomp, podman
ELSA-2022-7954
ELSA-2022-7954: podman security and bug fix update (MODERATE)
ROS-20230710-01
Множественные уязвимости podman
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2021-4024 A flaw was found in podman. The `podman machine` function (used to create and manage Podman virtual machine containing a Podman process) spawns a `gvproxy` process on the host system. The `gvproxy` API is accessible on port 7777 on all IP addresses on the host. If that port is open on the host's firewall, an attacker can potentially use the `gvproxy` API to forward ports on the host to ports in the VM, making private services on the VM accessible to the network. This issue could be also used to interrupt the host's services by forwarding all ports to the VM. | CVSS3: 6.5 | 1% Низкий | почти 5 лет назад |
 | CVE-2021-4024 A flaw was found in podman. The `podman machine` function (used to create and manage Podman virtual machine containing a Podman process) spawns a `gvproxy` process on the host system. The `gvproxy` API is accessible on port 7777 on all IP addresses on the host. If that port is open on the host's firewall, an attacker can potentially use the `gvproxy` API to forward ports on the host to ports in the VM, making private services on the VM accessible to the network. This issue could be also used to interrupt the host's services by forwarding all ports to the VM. | CVSS3: 4.8 | 1% Низкий | почти 5 лет назад |
 | CVE-2021-4024 A flaw was found in podman. The `podman machine` function (used to create and manage Podman virtual machine containing a Podman process) spawns a `gvproxy` process on the host system. The `gvproxy` API is accessible on port 7777 on all IP addresses on the host. If that port is open on the host's firewall, an attacker can potentially use the `gvproxy` API to forward ports on the host to ports in the VM, making private services on the VM accessible to the network. This issue could be also used to interrupt the host's services by forwarding all ports to the VM. | CVSS3: 6.5 | 1% Низкий | почти 5 лет назад |
| CVE-2021-4024 A flaw was found in podman. The `podman machine` function (used to cre ... | CVSS3: 6.5 | 1% Низкий | почти 5 лет назад |
| GHSA-3cf2-x423-x582 Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman | CVSS3: 6.5 | 1% Низкий | больше 4 лет назад |
 | BDU:2023-03676 Уязвимость инструмента управления виртуализацией podman-machine программного средства управления и запуска OCI-контейнеров Podman, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 6.5 | 1% Низкий | почти 5 лет назад |
| ALT-PU-2021-3549 ALT-PU-2021-3549: package `podman` update to version 3.4.3-alt2 | CVSS3: 6.5 | почти 5 лет назад | |
 | RLSA-2024:10289 Moderate: container-tools:rhel8 security update | почти 2 года назад | ||
| ELSA-2024-10289 ELSA-2024-10289: container-tools:ol8 security update (MODERATE) | почти 2 года назад | ||
| ALT-PU-2021-3495 ALT-PU-2021-3495: package `podman` update to version 3.4.3-alt1 | CVSS3: 6.5 | почти 5 лет назад | |
 | SUSE-SU-2023:0326-1 Security update for podman | больше 3 лет назад | ||
| SUSE-SU-2023:0187-1 Security update for podman | больше 3 лет назад | ||
| openSUSE-SU-2022:23018-1 Security update for conmon, libcontainers-common, libseccomp, podman | больше 4 лет назад | ||
| SUSE-SU-2022:23018-1 Security update for conmon, libcontainers-common, libseccomp, podman | больше 4 лет назад | ||
| ELSA-2022-7954 ELSA-2022-7954: podman security and bug fix update (MODERATE) | почти 4 года назад | ||
 | ROS-20230710-01 Множественные уязвимости podman | CVSS3: 8.8 | около 3 лет назад |
Уязвимостей на страницу