Every CVE Search/ Get API key

CVE-2019-18466

Podman Symlink Vulnerability

5.5 MediumFix available

An issue was discovered in Podman in libpod before 1.6.0. It resolves a symlink in the host context during a copy operation from the container to the host, because an undesired glob operation occurs. An attacker could create a container image containing particular symlinks that, when copied by a victim user to the host filesystem, may overwrite existing files with others from the host.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
High
Availability
None

Exploit likelihood

1.39%Down 0.1 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 5.5

An issue was discovered in Podman in libpod before 1.6.0. It resolves a symlink in the host context during a copy operation from the container to the host, because an undesired glob operation occurs. An attacker could create a container image containing particular symlinks that, when copied by a victim user to the host filesystem, may overwrite existing files with others from the host.

Record
CVE-2019-18466
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS 2.0
5.8 MediumAV:N/AC:M/Au:N/C:N/I:P/A:P
Weakness
CWE-59
Updated
2026-11-02
CVE List No score

An issue was discovered in Podman in libpod before 1.6.0. It resolves a symlink in the host context during a copy operation from the container to the host, because an undesired glob operation occurs. An attacker could create a container image containing particular symlinks that, when copied by a victim user to the host filesystem, may overwrite existing files with others from the host.

Record
CVE-2019-18466
Updated
2026-11-02
EUVDEUVD-2022-5078 No score

An issue was discovered in Podman in libpod before 1.6.0. It resolves a symlink in the host context during a copy operation from the container to the host, because an undesired glob operation occurs. An attacker could create a container image containing particular symlinks that, when copied by a victim user to the host filesystem, may overwrite existing files with others from the host.

Record
EUVD-2022-5078
Updated
2026-11-03
GitHub AdvisoriesGHSA-r34v-gqmw-qvgj 5.5

Podman Symlink Vulnerability

An issue was discovered in Podman in libpod before 1.6.0. It resolves a symlink in the host context during a copy operation from the container to the host, because an undesired glob operation occurs. An attacker could create a container image containing particular symlinks that, when copied by a victim user to the host filesystem, may overwrite existing files with others from the host.

Record
GHSA-r34v-gqmw-qvgj
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Weakness
CWE-59
Updated
2026-11-02
OSV 5.5

An issue was discovered in Podman in libpod before 1.6.0. It resolves a symlink in the host context during a copy operation from the container to the host, because an undesired glob operation occurs. An attacker could create a container image containing particular symlinks that, when copied by a victim user to the host filesystem, may overwrite existing files with others from the host.

Record
CVE-2019-18466
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVGHSA-r34v-gqmw-qvgj 5.5

Podman Symlink Vulnerability

An issue was discovered in Podman in libpod before 1.6.0. It resolves a symlink in the host context during a copy operation from the container to the host, because an undesired glob operation occurs. An attacker could create a container image containing particular symlinks that, when copied by a victim user to the host filesystem, may overwrite existing files with others from the host.

Record
GHSA-r34v-gqmw-qvgj
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Weakness
CWE-59
Updated
2026-11-02
Show 7 moreShow less
OSVRHSA-2019:4269 7.5

Red Hat Security Advisory: container-tools:rhel8 security and bug fix update

Record
RHSA-2019:4269
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2020:1227 3.5

Red Hat Security Advisory: podman security, bug fix, and enhancement update

Record
RHSA-2020:1227
CVSS 3.1
3.5 LowCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVRLSA-2019:4269 7.5

Important: container-tools:rhel8 security and bug fix update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

  • HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)

  • HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)

  • runc: AppArmor/SELinux bypass with malicious image that specifies a volume at /proc (CVE-2019-16884)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • avc: podman run --security-opt label=type:svirt_qemu_net_t (BZ#1764318)

  • backport json-file logging support to 1.4.2 (BZ#1770176)

  • Selinux won't allow SCTP inter pod communication (BZ#1774382)

Record
RLSA-2019:4269
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2019:4269 No score

Important: container-tools:rhel8 security and bug fix update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

  • HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)

  • HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)

  • runc: AppArmor/SELinux bypass with malicious image that specifies a volume at /proc (CVE-2019-16884)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • avc: podman run --security-opt label=type:svirt_qemu_net_t (BZ#1764318)

  • backport json-file logging support to 1.4.2 (BZ#1770176)

  • Selinux won't allow SCTP inter pod communication (BZ#1774382)

Record
ALSA-2019:4269
Updated
2026-11-02
OSVGO-2023-1942 No score

Podman Symlink Vulnerability in github.com/containers/libpod

Podman Symlink Vulnerability in github.com/containers/libpod

Record
GO-2023-1942
Updated
2026-11-02
OSVopenSUSE-SU-2020:0398-1 No score

Security update for cni, cni-plugins, conmon, fuse-overlayfs, podman

This update for cni, cni-plugins, conmon, fuse-overlayfs, podman fixes the following issues:

podman was updated to 1.8.0:

  • CVE-2019-18466: Fixed a bug where podman cp would improperly copy files on the host when copying a symlink in the container that included a glob operator (#3829 bsc#1155217)

  • The name of the cni-bridge in the default config changed from 'cni0' to 'podman-cni0' with podman-1.6.0. Add a %trigger to rename the bridge in the system to the new default if it exists. The trigger is only excuted when updating podman-cni-config from something older than 1.6.0. This is mainly needed for SLE where we're updating from 1.4.4 to 1.8.0 (bsc#1160460).

Update podman to v1.8.0 (bsc#1160460):

  • Features

    • The podman system service command has been added, providing a preview of Podman's new Docker-compatible API. This API is still very new, and not yet ready for production use, but is available for early testing
    • Rootless Podman now uses Rootlesskit for port forwarding, which should greatly improve performance and capabilities
    • The podman untag command has been added to remove tags from images without deleting them
    • The podman inspect command on images now displays previous names they used
    • The podman generate systemd command now supports a --new option to generate service files that create and run new containers instead of managing existing containers
    • Support for --log-opt tag= to set logging tags has been added to the journald log driver
    • Added support for using Seccomp profiles embedded in images for podman run and podman create via the new --seccomp-policy CLI flag
    • The podman play kube command now honors pull policy

  • Bugfixes

    • Fixed a bug where the podman cp command would not copy the contents of directories when paths ending in /. were given
    • Fixed a bug where the podman play kube command did not properly locate Seccomp profiles specified relative to localhost
    • Fixed a bug where the podman info command for remote Podman did not show registry information
    • Fixed a bug where the podman exec command did not support having input piped into it
    • Fixed a bug where the podman cp command with rootless Podman on CGroups v2 systems did not properly determine if the container could be paused while copying
    • Fixed a bug where the podman container prune --force command could possible remove running containers if they were started while the command was running
    • Fixed a bug where Podman, when run as root, would not properly configure slirp4netns networking when requested
    • Fixed a bug where podman run --userns=keep-id did not work when the user had a UID over 65535
    • Fixed a bug where rootless podman run and podman create with the --userns=keep-id option could change permissions on /run/user/$UID and break KDE
    • Fixed a bug where rootless Podman could not be run in a systemd service on systems using CGroups v2
    • Fixed a bug where podman inspect would show CPUShares as 0, instead of the default (1024), when it was not explicitly set
    • Fixed a bug where podman-remote push would segfault
    • Fixed a bug where image healthchecks were not shown in the output of podman inspect
    • Fixed a bug where named volumes created with containers from pre-1.6.3 releases of Podman would be autoremoved with their containers if the --rm flag was given, even if they were given names
    • Fixed a bug where podman history was not computing image sizes correctly
    • Fixed a bug where Podman would not error on invalid values to the --sort flag to podman images
    • Fixed a bug where providing a name for the image made by podman commit was mandatory, not optional as it should be
    • Fixed a bug where the remote Podman client would append an extra ' to %PATH
    • Fixed a bug where the podman build command would sometimes ignore the -f option and…
Record
openSUSE-SU-2020:0398-1
Updated
2026-11-02
OSVSUSE-SU-2020:0697-1 No score

Security update for cni, cni-plugins, conmon, fuse-overlayfs, podman

This update for cni, cni-plugins, conmon, fuse-overlayfs, podman fixes the following issues:

podman was updated to 1.8.0:

  • CVE-2019-18466: Fixed a bug where podman cp would improperly copy files on the host when copying a symlink in the container that included a glob operator (#3829 bsc#1155217)

  • The name of the cni-bridge in the default config changed from 'cni0' to 'podman-cni0' with podman-1.6.0. Add a %trigger to rename the bridge in the system to the new default if it exists. The trigger is only excuted when updating podman-cni-config from something older than 1.6.0. This is mainly needed for SLE where we're updating from 1.4.4 to 1.8.0 (bsc#1160460).

Update podman to v1.8.0 (bsc#1160460):

  • Features

    • The podman system service command has been added, providing a preview of Podman's new Docker-compatible API. This API is still very new, and not yet ready for production use, but is available for early testing
    • Rootless Podman now uses Rootlesskit for port forwarding, which should greatly improve performance and capabilities
    • The podman untag command has been added to remove tags from images without deleting them
    • The podman inspect command on images now displays previous names they used
    • The podman generate systemd command now supports a --new option to generate service files that create and run new containers instead of managing existing containers
    • Support for --log-opt tag= to set logging tags has been added to the journald log driver
    • Added support for using Seccomp profiles embedded in images for podman run and podman create via the new --seccomp-policy CLI flag
    • The podman play kube command now honors pull policy

  • Bugfixes

    • Fixed a bug where the podman cp command would not copy the contents of directories when paths ending in /. were given
    • Fixed a bug where the podman play kube command did not properly locate Seccomp profiles specified relative to localhost
    • Fixed a bug where the podman info command for remote Podman did not show registry information
    • Fixed a bug where the podman exec command did not support having input piped into it
    • Fixed a bug where the podman cp command with rootless Podman on CGroups v2 systems did not properly determine if the container could be paused while copying
    • Fixed a bug where the podman container prune --force command could possible remove running containers if they were started while the command was running
    • Fixed a bug where Podman, when run as root, would not properly configure slirp4netns networking when requested
    • Fixed a bug where podman run --userns=keep-id did not work when the user had a UID over 65535
    • Fixed a bug where rootless podman run and podman create with the --userns=keep-id option could change permissions on /run/user/$UID and break KDE
    • Fixed a bug where rootless Podman could not be run in a systemd service on systems using CGroups v2
    • Fixed a bug where podman inspect would show CPUShares as 0, instead of the default (1024), when it was not explicitly set
    • Fixed a bug where podman-remote push would segfault
    • Fixed a bug where image healthchecks were not shown in the output of podman inspect
    • Fixed a bug where named volumes created with containers from pre-1.6.3 releases of Podman would be autoremoved with their containers if the --rm flag was given, even if they were given names
    • Fixed a bug where podman history was not computing image sizes correctly
    • Fixed a bug where Podman would not error on invalid values to the --sort flag to podman images
    • Fixed a bug where providing a name for the image made by podman commit was mandatory, not optional as it should be
    • Fixed a bug where the remote Podman client would append an extra ' to %PATH
    • Fixed a bug where the podman build command would sometimes ignore the -f option and…
Record
SUSE-SU-2020:0697-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
github.com/containers/podman/v4
Go
 before 1.6.0
1.6.0
oci-systemd-hook
AlmaLinux:8
 before 1:0.1.15-2.git2d0b8a3.module_el8.5.0+119+9a9ec082
1:0.1.15-2.git2d0b8a3.module_el8.5.0+119+9a9ec082
oci-systemd-hook
AlmaLinux:8
 before 1:0.1.15-2.git2d0b8a3.module_el8.4.0+2496+12421f43
1:0.1.15-2.git2d0b8a3.module_el8.4.0+2496+12421f43
oci-systemd-hook
AlmaLinux:8
 before 1:0.1.15-2.git2d0b8a3.module_el8.3.0+2044+12421f43
1:0.1.15-2.git2d0b8a3.module_el8.3.0+2044+12421f43
oci-umount
AlmaLinux:8
 before 2:2.3.4-2.git87f9237.module_el8.5.0+119+9a9ec082
2:2.3.4-2.git87f9237.module_el8.5.0+119+9a9ec082
oci-umount
AlmaLinux:8
 before 2:2.3.4-2.git87f9237.module_el8.4.0+2496+12421f43
2:2.3.4-2.git87f9237.module_el8.4.0+2496+12421f43
oci-umount
AlmaLinux:8
 before 2:2.3.4-2.git87f9237.module_el8.3.0+2044+12421f43
2:2.3.4-2.git87f9237.module_el8.3.0+2044+12421f43
github.com/containers/libpod
Go
 before 1.6.0
1.6.0
github.com/containers/podman
Go
 All versions None known
github.com/containers/podman/v2
Go
 All versions None known
Show 59 moreShow less
Affected packages
PackageAffectedFixed
github.com/containers/podman/v3
Go
 All versions None known
github.com/containers/podman/v4
Go
 All versions None known
buildah
Red Hat:enterprise_linux:8::appstream
 before 0:1.9.0-5.module+el8.1.0+4240+893c1ab8
0:1.9.0-5.module+el8.1.0+4240+893c1ab8
buildah-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:1.9.0-5.module+el8.1.0+4240+893c1ab8
0:1.9.0-5.module+el8.1.0+4240+893c1ab8
buildah-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:1.9.0-5.module+el8.1.0+4240+893c1ab8
0:1.9.0-5.module+el8.1.0+4240+893c1ab8
buildah-tests
Red Hat:enterprise_linux:8::appstream
 before 0:1.9.0-5.module+el8.1.0+4240+893c1ab8
0:1.9.0-5.module+el8.1.0+4240+893c1ab8
buildah-tests-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:1.9.0-5.module+el8.1.0+4240+893c1ab8
0:1.9.0-5.module+el8.1.0+4240+893c1ab8
cockpit-podman
Red Hat:enterprise_linux:8::appstream
 before 0:4-1.module+el8.1.0+4081+b29780af
0:4-1.module+el8.1.0+4081+b29780af
container-selinux
Red Hat:enterprise_linux:8::appstream
 before 2:2.123.0-2.module+el8.1.0+4900+9d7326b8
2:2.123.0-2.module+el8.1.0+4900+9d7326b8
containernetworking-plugins
Red Hat:enterprise_linux:8::appstream
 before 0:0.8.1-3.module+el8.1.0+4881+045289ee
0:0.8.1-3.module+el8.1.0+4881+045289ee
containernetworking-plugins-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:0.8.1-3.module+el8.1.0+4881+045289ee
0:0.8.1-3.module+el8.1.0+4881+045289ee
containernetworking-plugins-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:0.8.1-3.module+el8.1.0+4881+045289ee
0:0.8.1-3.module+el8.1.0+4881+045289ee
containers-common
Red Hat:enterprise_linux:8::appstream
 before 1:0.1.37-6.module+el8.1.0+4876+e678a192
1:0.1.37-6.module+el8.1.0+4876+e678a192
fuse-overlayfs
Red Hat:enterprise_linux:8::appstream
 before 0:0.4.1-1.module+el8.1.0+4081+b29780af
0:0.4.1-1.module+el8.1.0+4081+b29780af
fuse-overlayfs-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:0.4.1-1.module+el8.1.0+4081+b29780af
0:0.4.1-1.module+el8.1.0+4081+b29780af
fuse-overlayfs-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:0.4.1-1.module+el8.1.0+4081+b29780af
0:0.4.1-1.module+el8.1.0+4081+b29780af
oci-systemd-hook
Red Hat:enterprise_linux:8::appstream
 before 1:0.1.15-2.git2d0b8a3.module+el8.1.0+4081+b29780af
1:0.1.15-2.git2d0b8a3.module+el8.1.0+4081+b29780af
oci-systemd-hook-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 1:0.1.15-2.git2d0b8a3.module+el8.1.0+4081+b29780af
1:0.1.15-2.git2d0b8a3.module+el8.1.0+4081+b29780af
oci-systemd-hook-debugsource
Red Hat:enterprise_linux:8::appstream
 before 1:0.1.15-2.git2d0b8a3.module+el8.1.0+4081+b29780af
1:0.1.15-2.git2d0b8a3.module+el8.1.0+4081+b29780af
oci-umount
Red Hat:enterprise_linux:8::appstream
 before 2:2.3.4-2.git87f9237.module+el8.1.0+4081+b29780af
2:2.3.4-2.git87f9237.module+el8.1.0+4081+b29780af
oci-umount-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 2:2.3.4-2.git87f9237.module+el8.1.0+4081+b29780af
2:2.3.4-2.git87f9237.module+el8.1.0+4081+b29780af
oci-umount-debugsource
Red Hat:enterprise_linux:8::appstream
 before 2:2.3.4-2.git87f9237.module+el8.1.0+4081+b29780af
2:2.3.4-2.git87f9237.module+el8.1.0+4081+b29780af
podman
Red Hat:enterprise_linux:8::appstream
 before 0:1.4.2-6.module+el8.1.0+4830+f49150d7
0:1.4.2-6.module+el8.1.0+4830+f49150d7
podman-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:1.4.2-6.module+el8.1.0+4830+f49150d7
0:1.4.2-6.module+el8.1.0+4830+f49150d7
podman-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:1.4.2-6.module+el8.1.0+4830+f49150d7
0:1.4.2-6.module+el8.1.0+4830+f49150d7
podman-docker
Red Hat:enterprise_linux:8::appstream
 before 0:1.4.2-6.module+el8.1.0+4830+f49150d7
0:1.4.2-6.module+el8.1.0+4830+f49150d7
podman-manpages
Red Hat:enterprise_linux:8::appstream
 before 0:1.4.2-6.module+el8.1.0+4830+f49150d7
0:1.4.2-6.module+el8.1.0+4830+f49150d7
podman-remote
Red Hat:enterprise_linux:8::appstream
 before 0:1.4.2-6.module+el8.1.0+4830+f49150d7
0:1.4.2-6.module+el8.1.0+4830+f49150d7
podman-remote-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:1.4.2-6.module+el8.1.0+4830+f49150d7
0:1.4.2-6.module+el8.1.0+4830+f49150d7
podman-tests
Red Hat:enterprise_linux:8::appstream
 before 0:1.4.2-6.module+el8.1.0+4830+f49150d7
0:1.4.2-6.module+el8.1.0+4830+f49150d7
python-podman-api
Red Hat:enterprise_linux:8::appstream
 before 0:1.2.0-0.1.gitd0a45fe.module+el8.1.0+4081+b29780af
0:1.2.0-0.1.gitd0a45fe.module+el8.1.0+4081+b29780af
runc
Red Hat:enterprise_linux:8::appstream
 before 0:1.0.0-61.rc8.module+el8.1.0+4873+4a24e241
0:1.0.0-61.rc8.module+el8.1.0+4873+4a24e241
runc-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:1.0.0-61.rc8.module+el8.1.0+4873+4a24e241
0:1.0.0-61.rc8.module+el8.1.0+4873+4a24e241
runc-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:1.0.0-61.rc8.module+el8.1.0+4873+4a24e241
0:1.0.0-61.rc8.module+el8.1.0+4873+4a24e241
skopeo
Red Hat:enterprise_linux:8::appstream
 before 1:0.1.37-6.module+el8.1.0+4876+e678a192
1:0.1.37-6.module+el8.1.0+4876+e678a192
skopeo-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 1:0.1.37-6.module+el8.1.0+4876+e678a192
1:0.1.37-6.module+el8.1.0+4876+e678a192
skopeo-debugsource
Red Hat:enterprise_linux:8::appstream
 before 1:0.1.37-6.module+el8.1.0+4876+e678a192
1:0.1.37-6.module+el8.1.0+4876+e678a192
skopeo-tests
Red Hat:enterprise_linux:8::appstream
 before 1:0.1.37-6.module+el8.1.0+4876+e678a192
1:0.1.37-6.module+el8.1.0+4876+e678a192
slirp4netns
Red Hat:enterprise_linux:8::appstream
 before 0:0.3.0-4.module+el8.1.0+4306+1d917805
0:0.3.0-4.module+el8.1.0+4306+1d917805
slirp4netns-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:0.3.0-4.module+el8.1.0+4306+1d917805
0:0.3.0-4.module+el8.1.0+4306+1d917805
slirp4netns-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:0.3.0-4.module+el8.1.0+4306+1d917805
0:0.3.0-4.module+el8.1.0+4306+1d917805
toolbox
Red Hat:enterprise_linux:8::appstream
 before 0:0.0.4-1.module+el8.1.0+4081+b29780af
0:0.0.4-1.module+el8.1.0+4081+b29780af
podman
Red Hat:rhel_extras_other:7
 before 0:1.6.4-16.el7_8
0:1.6.4-16.el7_8
podman-debuginfo
Red Hat:rhel_extras_other:7
 before 0:1.6.4-16.el7_8
0:1.6.4-16.el7_8
podman-docker
Red Hat:rhel_extras_other:7
 before 0:1.6.4-16.el7_8
0:1.6.4-16.el7_8
oci-systemd-hook
Rocky Linux:8
 before 1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f
1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f
oci-umount
Rocky Linux:8
 before 2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f
2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f
cni
SUSE:Linux Enterprise Module for Containers 15 SP1
 before 0.7.1-3.3.1
0.7.1-3.3.1
cni-plugins
SUSE:Linux Enterprise Module for Containers 15 SP1
 before 0.8.4-3.3.1
0.8.4-3.3.1
conmon
SUSE:Linux Enterprise Module for Containers 15 SP1
 before 2.0.10-3.3.1
2.0.10-3.3.1
fuse-overlayfs
SUSE:Linux Enterprise Module for Containers 15 SP1
 before 0.7.6-3.6.1
0.7.6-3.6.1
podman
SUSE:Linux Enterprise Module for Containers 15 SP1
 before 1.8.0-4.14.1
1.8.0-4.14.1
cni
SUSE:Linux Enterprise Module for Public Cloud 15 SP1
 before 0.7.1-3.3.1
0.7.1-3.3.1
cni-plugins
SUSE:Linux Enterprise Module for Public Cloud 15 SP1
 before 0.8.4-3.3.1
0.8.4-3.3.1
cni
openSUSE:Leap 15.1
 before 0.7.1-lp151.2.3.1
0.7.1-lp151.2.3.1
cni-plugins
openSUSE:Leap 15.1
 before 0.8.4-lp151.2.3.1
0.8.4-lp151.2.3.1
conmon
openSUSE:Leap 15.1
 before 2.0.10-lp151.2.1
2.0.10-lp151.2.1
fuse-overlayfs
openSUSE:Leap 15.1
 before 0.7.6-lp151.5.1
0.7.6-lp151.5.1
podman
openSUSE:Leap 15.1
 before 1.8.0-lp151.3.9.1
1.8.0-lp151.3.9.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-18466 is a medium vulnerability (CVSS 5.5) in Libpod Project Libpod, published October 28, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.39%, the 72nd percentile. Fixed in github.com/containers/podman/v4 1.6.0.

References

Show 59 moreShow less
This page doesn't list everything

Left out here: the rest of 2 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open