Read the docs

Podman Project

Records17All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

Podman Project records in CISA KEV

No Podman Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Podman 17 records MEDIUM

Records

17 records

TI-2022-01114 CVE-2022-1227 · GHSA-66vw-v2x9-hw75

Improper privilege management in psgo

Priority MEDIUM 45

A privilege escalation flaw was found in Podman.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04171 Published 2022-04-29 Partial fix · 3.4, 1.7.2 CWE-281
TI-2019-15207 CVE-2019-25067 · GHSA-vjwp-mggj-92gq

Podman/Varlink API Privilege Escalation

Priority MEDIUM 43

A vulnerability, which was classified as critical, was found in Podman and Varlink 1.5.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02592 Published 2022-06-09 No fix listed
TI-2022-10630 CVE-2022-27649 · GHSA-qvf8-p83w-v58j

Incorrect default permissions in podman

Priority LOW 36

A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01429 Published 2022-04-04 Partial fix · 4.0.3 CWE-276
TI-2022-02536 CVE-2022-2738 · GHSA-8pqv-rxj7-35c4

Use after free in podman

Priority LOW 35

The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-8945, which was previously fixed via RHSA-2020:2117…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00931 Published 2022-09-01 Fixed CWE-416
TI-2022-02760 CVE-2022-2989 · GHSA-4wjj-jwc9-2x96

Incorrect authorization in podman

Priority LOW 33

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00326 Published 2022-09-13 Partial fix · 4.2.0, 3.0.1 CWE-842
TI-2022-03769 CVE-2022-4122 · GHSA-4crw-w8pw-2hmf

Link following in podman

Priority LOW 32

A vulnerability was found in buildah.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00865 Published 2022-12-08 Partial fix · 4.5.0 CWE-59
TI-2021-02915 CVE-2021-4024 · GHSA-3cf2-x423-x582

Information disclosure in podman

Priority LOW 31

A flaw was found in podman.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01137 Published 2021-12-23 Fixed in 3.4.3 CWE-200
TI-2021-03488 CVE-2021-20188 · GHSA-9h63-7qf6-mv6r

Incorrect authorization in podman

Priority LOW 30

A flaw was found in podman before 1.7.0.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2021-02-11 Partial fix · 1.7.0 CWE-863
TI-2021-03497 CVE-2021-20199 · GHSA-grh6-q6m2-rh72

Origin validation error in podman

Priority LOW 29

Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 (including from remote hosts).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01159 Published 2021-02-02 Partial fix · 3.0.0 CWE-346
TI-2020-11238 CVE-2020-14370 · GHSA-c3wv-qmjj-45r6

Information disclosure in podman

Priority LOW 27

An information disclosure vulnerability was found in containers/podman in versions before 2.0.5.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.01402 Published 2020-09-23 Partial fix · 2.0.5 CWE-212
TI-2022-02537 CVE-2022-2739 · GHSA-cqvr-p82r-76m9

Information disclosure in podman

Priority LOW 25

The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-14370, which was previously fixed via RHSA-2020:505…

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00517 Published 2022-09-01 Fixed CWE-200
TI-2022-03770 CVE-2022-4123 · GHSA-rprg-4v7q-87v7

Path traversal in podman

Priority LOW 16

A flaw was found in Buildah.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00244 Published 2022-12-08 No fix listed CWE-23
Open these records in search →