Read the docs

Libpod Project

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Libpod Project records in CISA KEV

No Libpod Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Libpod 5 records MEDIUM

Records

5 records in Libpod · all components

TI-2018-07670 CVE-2018-10856 · GHSA-wp7w-vx86-vj9h

Incorrect permission assignment in [UNKNOWN] podman

Priority MEDIUM 40

It has been discovered that podman before version 0.6.1 does not drop capabilities when executing a container as a non-root user.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.00878 Published 2018-07-02 Fixed in 0.6.1 CWE-250
TI-2019-07473 CVE-2019-10152 · GHSA-rh5f-2w6r-q7vj

Path traversal in podman

Priority LOW 32

A path traversal vulnerability has been discovered in podman before version 1.4.0 in the way it handles symlinks inside containers.

CVSS 3.1HIGH 7.2 Local Low privileges User interaction EPSS 0.00468 Published 2019-07-30 Fixed in 1.4.0 CWE-22
TI-2019-07534 CVE-2019-10214 · GHSA-85p9-j7c9-v4gr

Insufficiently protected credentials in containers/image

Priority LOW 30

The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift Container Platform, does not enforce TLS connections to the container regi…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01591 Published 2019-11-25 Partial fix · 3.0.0 CWE-522
Open these records in search →