podman vulnerabilities (AlmaLinux)
137 vulnerabilities.
podmanAlmaLinuxBuildah's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1 HighpodmanAlmaLinuxPodman's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1 HighpodmanAlmaLinuxgolang.org/x/net/http2 Denial of Service vulnerability7.5 HighpodmanAlmaLinuxExcessive resource consumption in gopkg.in/yaml.v27.5 HighpodmanAlmaLinuxPanic when decoding Float and Rat types in math/big7.5 HighpodmanAlmaLinuxExposure of client IP addresses in net/http6.5 MediumpodmanAlmaLinuxStack exhaustion when decoding certain messages in encoding/gob7.5 HighpodmanAlmaLinuxStack exhaustion when unmarshaling certain documents in encoding/xml7.5 HighpodmanAlmaLinuxStack exhaustion on crafted paths in path/filepath7.5 HighpodmanAlmaLinuxStack exhaustion when reading certain archives in compress/gzip7.5 HighpodmanAlmaLinuxStack exhaustion in Glob on certain paths in io/fs7.5 HighpodmanAlmaLinuxStack exhaustion from deeply nested XML documents in encoding/xml7.5 HighpodmanAlmaLinuxStack exhaustion due to deeply nested types in go/parser5.5 MediumpodmanAlmaLinuxImproper sanitization of Transfer-Encoding headers in net/http6.5 MediumpodmanAlmaLinuxSession tickets lack random ticket_age_add in crypto/tls3.1 LowpodmanAlmaLinuxNode DOS by way of memory exhaustion through ExecSync request in CRI-O7.5 HighpodmanAlmaLinuxIncorrect Default Permissions in runc5.9 MediumpodmanAlmaLinuxcontainer-tools:4.0 bug fix updateNo scorepodmanAlmaLinuxcontainer-tools:rhel8 bug fix updateNo scorepodmanAlmaLinuxnew module: container-tools:4.0No scorepodmanAlmaLinuxPodman publishes a malicious image to public registries8.8 HighpodmanAlmaLinuxImportant: container-tools:rhel8 security, bug fix, and enhancement update7.5 HighpodmanAlmaLinuxPodman's default inheritable capabilities for linux container not empty7.5 HighpodmanAlmaLinuxNon-empty default inheritable capabilities for linux container in Buildah6.8 MediumpodmanAlmaLinuxgolang.org/x/crypto/ssh Denial of service via crafted Signer7.5 HighpodmanAlmaLinuxUncontrolled Resource Consumption in promhttp7.5 HighpodmanAlmaLinuxcontainer-tools:rhel8 security, bug fix, and enhancement updateNo scorepodmanAlmaLinuxExposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman6.5 MediumpodmanAlmaLinuxThe crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key...6.5 MediumpodmanAlmaLinuxGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 2 of 2).7.5 HighpodmanAlmaLinuxGo before 1.15.12 and 1.16.x before 1.16.5 acts as an Unintended Proxy or Intermediary.5.3 MediumpodmanAlmaLinuxImproper Locking in github.com/containers/storage6.5 MediumpodmanAlmaLinuxPodman Origin Validation Error5.9 MediumpodmanAlmaLinuxIn x/text in Go 1.15.4, a "slice bounds out of range" panic occurs in language...7.5 HighpodmanAlmaLinuxIn x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage...7.5 HighpodmanAlmaLinuxImproper Authorization in github.com/containers/libpod7.0 HighpodmanAlmaLinuxopencontainers runc contains procfs race condition with a shared volume mount7.0 High