podman vulnerabilities (Alpine)
31 vulnerabilities.
-
podmanAlpine Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose 9.3 Critical -
podmanAlpine Podman: arbitrary file write when importing oci archive 5.5 Medium -
podmanAlpine Podman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directory 4.4 Medium -
podmanAlpine Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers 4.5 Medium -
podmanAlpine Podman: podman: quadlet install --replace non-truncating write retains removed host-access directives 4.2 Medium -
podmanAlpine Podman: Malformed Image can trick podman run into leaking host environment variables into the container 7.5 High -
podmanAlpine Buildah: Build breakout using malicious Containerfile and Git Smart HTTP server or GitHub release tar archive 6.3 Medium -
podmanAlpine runc: LSM labels can be bypassed with malicious config using dummy procfs files 7.3 High -
podmanAlpine Podman: podman kube play command may overwrite host files 8.1 High -
podmanAlpine Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile 8.6 High -
podmanAlpine Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos) 6.5 Medium -
podmanAlpine Buildah: buildah allows arbitrary directory mount 7.8 High -
podmanAlpine Buildah: podman: improper input validation in bind-propagation option of dockerfile run --mount instruction 4.7 Medium -
podmanAlpine Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library 5.4 Medium -
podmanAlpine Buildah: buildah: container escape via improper bind mount validation 8.6 High -
podmanAlpine BuildKit interactive containers API does not validate entitlements check 9.8 Critical -
podmanAlpine BuildKit possible host system access from mount stub cleaner 10.0 Critical -
podmanAlpine BuildKit possible race condition with accessing subpaths from cache mounts 8.7 High -
podmanAlpine Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin 5.9 Medium -
podmanAlpine Podman Time-of-check Time-of-use (TOCTOU) Race Condition 6.8 Medium -
podmanAlpine Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net 7.5 High -
podmanAlpine Podman's incorrect handling of the supplementary groups may lead to data disclosure, modification 7.1 High -
podmanAlpine Podman publishes a malicious image to public registries 8.8 High -
podmanAlpine Podman's default inheritable capabilities for linux container not empty 7.5 High -
podmanAlpine golang.org/x/crypto/ssh Denial of service via crafted Signer 7.5 High -
podmanAlpine Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman 6.5 Medium -
podmanAlpine Clarify Content-Type handling in OCI spec 3.0 Low -
podmanAlpine Buildah processes using chroot isolation may leak environment values to intermediate processes 5.5 Medium -
podmanAlpine Podman Origin Validation Error 5.9 Medium -
podmanAlpine Information disclosure in podman 5.3 Medium -
podmanAlpine Podman has Files or Directories Accessible to External Parties 5.9 Medium