CVE-2022-4122
Buildah (as part of Podman) vulnerable to Link Following
5.3 MediumFix available
A vulnerability was found in buildah. Incorrect following of symlinks while reading .containerignore and .dockerignore results in information disclosure.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
0.86%Unchanged since Dec 9, 2022
What each source reports
NVD Score used
A vulnerability was found in buildah. Incorrect following of symlinks while reading .containerignore and .dockerignore results in information disclosure.
- Record
CVE-2022-4122- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE List
A vulnerability was found in buildah. Incorrect following of symlinks while reading .containerignore and .dockerignore results in information disclosure.
- Record
CVE-2022-4122- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-59, CWE-59
- Updated
- 2026-11-02
EUVDEUVD-2022-7501
A vulnerability was found in buildah. Incorrect following of symlinks while reading .containerignore and .dockerignore results in information disclosure.
- Record
EUVD-2022-7501- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-4crw-w8pw-2hmf
Buildah (as part of Podman) vulnerable to Link Following
A vulnerability was found in buildah. Incorrect following of symlinks while reading .containerignore and .dockerignore results in information disclosure.
- Record
GHSA-4crw-w8pw-2hmf- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-59
- Updated
- 2026-11-02
OSVAZL-44526
CVE-2022-4122 affecting package podman for versions less than 5.6.1-2
A vulnerability was found in buildah. Incorrect following of symlinks while reading .containerignore and .dockerignore results in information disclosure.
- Record
AZL-44526- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSV
A vulnerability was found in buildah. Incorrect following of symlinks while reading .containerignore and .dockerignore results in information disclosure.
- Record
CVE-2022-4122- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-59
- Updated
- 2026-11-02
Show 7 moreShow less
OSVGHSA-4crw-w8pw-2hmf
Buildah (as part of Podman) vulnerable to Link Following
A vulnerability was found in buildah. Incorrect following of symlinks while reading .containerignore and .dockerignore results in information disclosure.
- Record
GHSA-4crw-w8pw-2hmf- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-59
- Updated
- 2026-11-02
OSVRHSA-2024:2077
Red Hat Security Advisory: container-tools:rhel8 security and bug fix update
- Record
RHSA-2024:2077- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:9102
Red Hat Security Advisory: podman security update
- Record
RHSA-2024:9102- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2022-4122
A vulnerability was found in buildah. Incorrect following of symlinks while reading .containerignore and .dockerignore results in information disclosure.
- Record
UBUNTU-CVE-2022-4122- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2022-4122 No score
A vulnerability was found in buildah. Incorrect following of symlinks while reading .containerignore and .dockerignore results in information disclosure.
- Record
DEBIAN-CVE-2022-4122- Updated
- 2026-11-03
OSVGO-2022-1151 No score
Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman
Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman
- Record
GO-2022-1151- Updated
- 2026-11-02
OSVRLSA-2024:9102 No score
Moderate: podman security update
The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.
Security Fix(es):
-
podman: Symlink error leads to information disclosure (CVE-2022-4122)
-
containers/image: digest type does not guarantee valid type (CVE-2024-3727)
-
golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789)
-
net/http: Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.
- Record
RLSA-2024:9102- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
github.com/containers/podman/v4Go |
before 4.5.0 | 4.5.0 |
podmanAzure Linux:3 |
before 5.6.1-2 | 5.6.1-2 |
golang-github-containers-buildahDebian:12 |
All versions, plus listed versions 1.28.2+ds1-31.28.2+ds1-3+deb12u11.29.0+ds1-11.30.0+ds1-11.30.0+ds1-2 Show 45 moreShow less1.30.0+ds1-31.31.2+ds1-11.31.2+ds1-21.31.2+ds1-31.32.0+ds1-11.32.0+ds1-21.32.2+ds1-11.33.1+ds1-11.33.1+ds1-21.33.3+ds1-11.33.3+ds1-21.33.5+ds1-31.33.5+ds1-41.33.7+ds1-11.34.0+ds1-11.34.0+ds1-21.35.3+ds1-11.35.3+ds1-21.35.3+ds1-31.37.0+ds1-11.37.1+ds1-11.37.1+ds1-21.37.2+ds1-11.37.2+ds1-21.37.2+ds1-31.37.3+ds1-11.37.3+ds1-21.37.3+ds1-31.37.4+ds1-11.37.5+ds1-11.38.0+ds1-11.38.0+ds1-21.38.1+ds1-11.39.0+ds1-11.39.3+ds1-11.41.4+ds1-11.41.4+ds1-21.41.4+ds1-31.41.5+ds1-11.41.5+ds1-21.41.5+ds1-31.41.5+ds1-41.42.1+ds1-11.42.1+ds1-21.43.0+ds1-1 |
None known |
golang-github-containers-buildahDebian:13 |
All versions, plus listed versions 1.39.3+ds1-11.41.4+ds1-11.41.4+ds1-21.41.4+ds1-31.41.5+ds1-1 Show 15 moreShow less1.41.5+ds1-21.41.5+ds1-31.41.5+ds1-41.42.1+ds1-11.42.1+ds1-21.43.0+ds1-11.43.0+ds1-21.43.1+ds1-11.43.1+ds1-21.43.1+ds1-31.43.2+ds1-11.43.2+ds1-21.43.2+ds1-31.45.0+ds1-11.45.0+ds1-2 |
None known |
golang-github-containers-buildahDebian:14 |
All versions, plus listed versions 1.39.3+ds1-11.41.4+ds1-11.41.4+ds1-21.41.4+ds1-31.41.5+ds1-1 Show 15 moreShow less1.41.5+ds1-21.41.5+ds1-31.41.5+ds1-41.42.1+ds1-11.42.1+ds1-21.43.0+ds1-11.43.0+ds1-21.43.1+ds1-11.43.1+ds1-21.43.1+ds1-31.43.2+ds1-11.43.2+ds1-21.43.2+ds1-31.45.0+ds1-11.45.0+ds1-2 |
None known |
github.com/containers/podmanGo |
All versions | None known |
github.com/containers/podman/v2Go |
All versions | None known |
github.com/containers/podman/v3Go |
All versions | None known |
aardvark-dnsRed Hat:rhel_eus:8.8::appstream |
before 2:1.5.0-2.module+el8.8.0+21741+dd5be1e7 | 2:1.5.0-2.module+el8.8.0+21741+dd5be1e7 |
buildahRed Hat:rhel_eus:8.8::appstream |
before 1:1.29.3-1.module+el8.8.0+21741+dd5be1e7 | 1:1.29.3-1.module+el8.8.0+21741+dd5be1e7 |
Show 78 moreShow less
| Package | Affected | Fixed |
|---|---|---|
buildah-debuginfoRed Hat:rhel_eus:8.8::appstream |
before 1:1.29.3-1.module+el8.8.0+21741+dd5be1e7 | 1:1.29.3-1.module+el8.8.0+21741+dd5be1e7 |
buildah-debugsourceRed Hat:rhel_eus:8.8::appstream |
before 1:1.29.3-1.module+el8.8.0+21741+dd5be1e7 | 1:1.29.3-1.module+el8.8.0+21741+dd5be1e7 |
buildah-testsRed Hat:rhel_eus:8.8::appstream |
before 1:1.29.3-1.module+el8.8.0+21741+dd5be1e7 | 1:1.29.3-1.module+el8.8.0+21741+dd5be1e7 |
buildah-tests-debuginfoRed Hat:rhel_eus:8.8::appstream |
before 1:1.29.3-1.module+el8.8.0+21741+dd5be1e7 | 1:1.29.3-1.module+el8.8.0+21741+dd5be1e7 |
cockpit-podmanRed Hat:rhel_eus:8.8::appstream |
before 0:63.1-1.module+el8.8.0+21741+dd5be1e7 | 0:63.1-1.module+el8.8.0+21741+dd5be1e7 |
conmonRed Hat:rhel_eus:8.8::appstream |
before 3:2.1.6-1.module+el8.8.0+21741+dd5be1e7 | 3:2.1.6-1.module+el8.8.0+21741+dd5be1e7 |
conmon-debuginfoRed Hat:rhel_eus:8.8::appstream |
before 3:2.1.6-1.module+el8.8.0+21741+dd5be1e7 | 3:2.1.6-1.module+el8.8.0+21741+dd5be1e7 |
conmon-debugsourceRed Hat:rhel_eus:8.8::appstream |
before 3:2.1.6-1.module+el8.8.0+21741+dd5be1e7 | 3:2.1.6-1.module+el8.8.0+21741+dd5be1e7 |
container-selinuxRed Hat:rhel_eus:8.8::appstream |
before 2:2.229.0-1.module+el8.8.0+21741+dd5be1e7 | 2:2.229.0-1.module+el8.8.0+21741+dd5be1e7 |
containernetworking-pluginsRed Hat:rhel_eus:8.8::appstream |
before 1:1.2.0-1.module+el8.8.0+21741+dd5be1e7 | 1:1.2.0-1.module+el8.8.0+21741+dd5be1e7 |
containernetworking-plugins-debuginfoRed Hat:rhel_eus:8.8::appstream |
before 1:1.2.0-1.module+el8.8.0+21741+dd5be1e7 | 1:1.2.0-1.module+el8.8.0+21741+dd5be1e7 |
containernetworking-plugins-debugsourceRed Hat:rhel_eus:8.8::appstream |
before 1:1.2.0-1.module+el8.8.0+21741+dd5be1e7 | 1:1.2.0-1.module+el8.8.0+21741+dd5be1e7 |
containers-commonRed Hat:rhel_eus:8.8::appstream |
before 2:1-65.module+el8.8.0+21741+dd5be1e7 | 2:1-65.module+el8.8.0+21741+dd5be1e7 |
critRed Hat:rhel_eus:8.8::appstream |
before 0:3.15-4.module+el8.8.0+21741+dd5be1e7 | 0:3.15-4.module+el8.8.0+21741+dd5be1e7 |
criuRed Hat:rhel_eus:8.8::appstream |
before 0:3.15-4.module+el8.8.0+21741+dd5be1e7 | 0:3.15-4.module+el8.8.0+21741+dd5be1e7 |
criu-debuginfoRed Hat:rhel_eus:8.8::appstream |
before 0:3.15-4.module+el8.8.0+21741+dd5be1e7 | 0:3.15-4.module+el8.8.0+21741+dd5be1e7 |
criu-debugsourceRed Hat:rhel_eus:8.8::appstream |
before 0:3.15-4.module+el8.8.0+21741+dd5be1e7 | 0:3.15-4.module+el8.8.0+21741+dd5be1e7 |
criu-develRed Hat:rhel_eus:8.8::appstream |
before 0:3.15-4.module+el8.8.0+21741+dd5be1e7 | 0:3.15-4.module+el8.8.0+21741+dd5be1e7 |
criu-libsRed Hat:rhel_eus:8.8::appstream |
before 0:3.15-4.module+el8.8.0+21741+dd5be1e7 | 0:3.15-4.module+el8.8.0+21741+dd5be1e7 |
criu-libs-debuginfoRed Hat:rhel_eus:8.8::appstream |
before 0:3.15-4.module+el8.8.0+21741+dd5be1e7 | 0:3.15-4.module+el8.8.0+21741+dd5be1e7 |
crunRed Hat:rhel_eus:8.8::appstream |
before 0:1.8.4-2.module+el8.8.0+21741+dd5be1e7 | 0:1.8.4-2.module+el8.8.0+21741+dd5be1e7 |
crun-debuginfoRed Hat:rhel_eus:8.8::appstream |
before 0:1.8.4-2.module+el8.8.0+21741+dd5be1e7 | 0:1.8.4-2.module+el8.8.0+21741+dd5be1e7 |
crun-debugsourceRed Hat:rhel_eus:8.8::appstream |
before 0:1.8.4-2.module+el8.8.0+21741+dd5be1e7 | 0:1.8.4-2.module+el8.8.0+21741+dd5be1e7 |
fuse-overlayfsRed Hat:rhel_eus:8.8::appstream |
before 0:1.11-1.module+el8.8.0+21741+dd5be1e7 | 0:1.11-1.module+el8.8.0+21741+dd5be1e7 |
fuse-overlayfs-debuginfoRed Hat:rhel_eus:8.8::appstream |
before 0:1.11-1.module+el8.8.0+21741+dd5be1e7 | 0:1.11-1.module+el8.8.0+21741+dd5be1e7 |
fuse-overlayfs-debugsourceRed Hat:rhel_eus:8.8::appstream |
before 0:1.11-1.module+el8.8.0+21741+dd5be1e7 | 0:1.11-1.module+el8.8.0+21741+dd5be1e7 |
libslirpRed Hat:rhel_eus:8.8::appstream |
before 0:4.4.0-1.module+el8.8.0+21741+dd5be1e7 | 0:4.4.0-1.module+el8.8.0+21741+dd5be1e7 |
libslirp-debuginfoRed Hat:rhel_eus:8.8::appstream |
before 0:4.4.0-1.module+el8.8.0+21741+dd5be1e7 | 0:4.4.0-1.module+el8.8.0+21741+dd5be1e7 |
libslirp-debugsourceRed Hat:rhel_eus:8.8::appstream |
before 0:4.4.0-1.module+el8.8.0+21741+dd5be1e7 | 0:4.4.0-1.module+el8.8.0+21741+dd5be1e7 |
libslirp-develRed Hat:rhel_eus:8.8::appstream |
before 0:4.4.0-1.module+el8.8.0+21741+dd5be1e7 | 0:4.4.0-1.module+el8.8.0+21741+dd5be1e7 |
netavarkRed Hat:rhel_eus:8.8::appstream |
before 2:1.5.1-3.module+el8.8.0+21741+dd5be1e7 | 2:1.5.1-3.module+el8.8.0+21741+dd5be1e7 |
oci-seccomp-bpf-hookRed Hat:rhel_eus:8.8::appstream |
before 0:1.2.8-1.module+el8.8.0+21741+dd5be1e7 | 0:1.2.8-1.module+el8.8.0+21741+dd5be1e7 |
oci-seccomp-bpf-hook-debuginfoRed Hat:rhel_eus:8.8::appstream |
before 0:1.2.8-1.module+el8.8.0+21741+dd5be1e7 | 0:1.2.8-1.module+el8.8.0+21741+dd5be1e7 |
oci-seccomp-bpf-hook-debugsourceRed Hat:rhel_eus:8.8::appstream |
before 0:1.2.8-1.module+el8.8.0+21741+dd5be1e7 | 0:1.2.8-1.module+el8.8.0+21741+dd5be1e7 |
podmanRed Hat:rhel_eus:8.8::appstream |
before 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 | 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 |
podman-catatonitRed Hat:rhel_eus:8.8::appstream |
before 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 | 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 |
podman-catatonit-debuginfoRed Hat:rhel_eus:8.8::appstream |
before 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 | 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 |
podman-debuginfoRed Hat:rhel_eus:8.8::appstream |
before 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 | 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 |
podman-debugsourceRed Hat:rhel_eus:8.8::appstream |
before 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 | 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 |
podman-dockerRed Hat:rhel_eus:8.8::appstream |
before 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 | 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 |
podman-gvproxyRed Hat:rhel_eus:8.8::appstream |
before 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 | 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 |
podman-gvproxy-debuginfoRed Hat:rhel_eus:8.8::appstream |
before 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 | 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 |
podman-pluginsRed Hat:rhel_eus:8.8::appstream |
before 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 | 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 |
podman-plugins-debuginfoRed Hat:rhel_eus:8.8::appstream |
before 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 | 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 |
podman-remoteRed Hat:rhel_eus:8.8::appstream |
before 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 | 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 |
podman-remote-debuginfoRed Hat:rhel_eus:8.8::appstream |
before 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 | 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 |
podman-testsRed Hat:rhel_eus:8.8::appstream |
before 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 | 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 |
python-podmanRed Hat:rhel_eus:8.8::appstream |
before 0:4.4.1-1.module+el8.8.0+21741+dd5be1e7 | 0:4.4.1-1.module+el8.8.0+21741+dd5be1e7 |
python3-criuRed Hat:rhel_eus:8.8::appstream |
before 0:3.15-4.module+el8.8.0+21741+dd5be1e7 | 0:3.15-4.module+el8.8.0+21741+dd5be1e7 |
python3-podmanRed Hat:rhel_eus:8.8::appstream |
before 0:4.4.1-1.module+el8.8.0+21741+dd5be1e7 | 0:4.4.1-1.module+el8.8.0+21741+dd5be1e7 |
runcRed Hat:rhel_eus:8.8::appstream |
before 1:1.1.12-1.module+el8.8.0+21741+dd5be1e7 | 1:1.1.12-1.module+el8.8.0+21741+dd5be1e7 |
runc-debuginfoRed Hat:rhel_eus:8.8::appstream |
before 1:1.1.12-1.module+el8.8.0+21741+dd5be1e7 | 1:1.1.12-1.module+el8.8.0+21741+dd5be1e7 |
runc-debugsourceRed Hat:rhel_eus:8.8::appstream |
before 1:1.1.12-1.module+el8.8.0+21741+dd5be1e7 | 1:1.1.12-1.module+el8.8.0+21741+dd5be1e7 |
skopeoRed Hat:rhel_eus:8.8::appstream |
before 2:1.11.2-0.2.module+el8.8.0+21741+dd5be1e7 | 2:1.11.2-0.2.module+el8.8.0+21741+dd5be1e7 |
skopeo-testsRed Hat:rhel_eus:8.8::appstream |
before 2:1.11.2-0.2.module+el8.8.0+21741+dd5be1e7 | 2:1.11.2-0.2.module+el8.8.0+21741+dd5be1e7 |
slirp4netnsRed Hat:rhel_eus:8.8::appstream |
before 0:1.2.0-3.module+el8.8.0+21741+dd5be1e7 | 0:1.2.0-3.module+el8.8.0+21741+dd5be1e7 |
slirp4netns-debuginfoRed Hat:rhel_eus:8.8::appstream |
before 0:1.2.0-3.module+el8.8.0+21741+dd5be1e7 | 0:1.2.0-3.module+el8.8.0+21741+dd5be1e7 |
slirp4netns-debugsourceRed Hat:rhel_eus:8.8::appstream |
before 0:1.2.0-3.module+el8.8.0+21741+dd5be1e7 | 0:1.2.0-3.module+el8.8.0+21741+dd5be1e7 |
toolboxRed Hat:rhel_eus:8.8::appstream |
before 0:0.0.99.3-7.module+el8.8.0+21741+dd5be1e7 | 0:0.0.99.3-7.module+el8.8.0+21741+dd5be1e7 |
toolbox-debuginfoRed Hat:rhel_eus:8.8::appstream |
before 0:0.0.99.3-7.module+el8.8.0+21741+dd5be1e7 | 0:0.0.99.3-7.module+el8.8.0+21741+dd5be1e7 |
toolbox-debugsourceRed Hat:rhel_eus:8.8::appstream |
before 0:0.0.99.3-7.module+el8.8.0+21741+dd5be1e7 | 0:0.0.99.3-7.module+el8.8.0+21741+dd5be1e7 |
toolbox-testsRed Hat:rhel_eus:8.8::appstream |
before 0:0.0.99.3-7.module+el8.8.0+21741+dd5be1e7 | 0:0.0.99.3-7.module+el8.8.0+21741+dd5be1e7 |
udicaRed Hat:rhel_eus:8.8::appstream |
before 0:0.2.6-20.module+el8.8.0+21741+dd5be1e7 | 0:0.2.6-20.module+el8.8.0+21741+dd5be1e7 |
podmanRed Hat:enterprise_linux:9::appstream |
before 2:5.2.2-1.el9 | 2:5.2.2-1.el9 |
podman-debuginfoRed Hat:enterprise_linux:9::appstream |
before 2:5.2.2-1.el9 | 2:5.2.2-1.el9 |
podman-debugsourceRed Hat:enterprise_linux:9::appstream |
before 2:5.2.2-1.el9 | 2:5.2.2-1.el9 |
podman-dockerRed Hat:enterprise_linux:9::appstream |
before 2:5.2.2-1.el9 | 2:5.2.2-1.el9 |
podman-pluginsRed Hat:enterprise_linux:9::appstream |
before 2:5.2.2-1.el9 | 2:5.2.2-1.el9 |
podman-plugins-debuginfoRed Hat:enterprise_linux:9::appstream |
before 2:5.2.2-1.el9 | 2:5.2.2-1.el9 |
podman-remoteRed Hat:enterprise_linux:9::appstream |
before 2:5.2.2-1.el9 | 2:5.2.2-1.el9 |
podman-remote-debuginfoRed Hat:enterprise_linux:9::appstream |
before 2:5.2.2-1.el9 | 2:5.2.2-1.el9 |
podman-testsRed Hat:enterprise_linux:9::appstream |
before 2:5.2.2-1.el9 | 2:5.2.2-1.el9 |
podmanRocky Linux:9 |
before 4:5.2.2-13.el9_5 | 4:5.2.2-13.el9_5 |
golang-github-containers-buildahUbuntu:22.04:LTS |
All versions, plus listed versions 1.21.3+ds1-1ubuntu11.23.1+ds1-2 |
None known |
golang-github-containers-buildahUbuntu:Pro:24.04:LTS |
All versions, plus listed versions 1.28.2+ds1-3build11.32.2+ds1-11.33.1+ds1-21.33.3+ds1-21.33.5+ds1-4 Show 10 moreShow less1.33.5+ds1-4build11.33.5+ds1-4build21.33.7+ds1-11.33.7+ds1-1ubuntu0.24.04.11.33.7+ds1-1ubuntu0.24.04.21.33.7+ds1-1ubuntu0.24.04.2+esm11.33.7+ds1-1ubuntu0.24.04.2+esm21.33.7+ds1-1ubuntu0.24.04.31.33.7+ds1-1ubuntu0.24.04.3+esm21.33.7+ds1-1ubuntu0.24.04.3+esm3 |
None known |
golang-github-containers-buildahUbuntu:25.10 |
All versions, plus listed versions 1.39.3+ds1-1syncable1 |
None known |
golang-github-containers-buildahUbuntu:26.10 |
All versions, plus listed versions 1.42.1+ds1-2build11.43.2+ds1-3 |
None known |
golang-github-containers-buildahUbuntu:Pro:26.04:LTS |
All versions, plus listed versions 1.39.3+ds1-1syncable11.42.1+ds1-21.42.1+ds1-2build11.42.1+ds1-2ubuntu0.26.04.1~esm1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-4122 is a medium vulnerability (CVSS 5.3) in Containers Podman, published December 8, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.86%, the 58th percentile. Fixed in github.com/containers/podman/v4 4.5.0.
References
bugzilla.redhat.com/show_bug.cgi?id=2144983
github.com/containers/podman/pull/16315
nvd.nist.gov/vuln/detail/CVE-2022-4122
Show 53 moreShow less
security-tracker.debian.org/tracker/CVE-2022-4122
access.redhat.com/errata/RHSA-2024:2077
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2077.json
cve.org/CVERecord?id=CVE-2022-4122
go.dev/issue/56152
groups.google.com/g/golang-dev/c/qfPIly0X7aU
pkg.go.dev/vuln/GO-2024-2658
docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index
issues.redhat.com/browse/RHEL-17776
errata.rockylinux.org/RLSA-2024:9102
ubuntu.com/security/CVE-2022-4122
This page doesn't list everything
Left out here: 9 versions. The JSON record has them.