podmansh vulnerabilities (Red Hat)
16 vulnerabilities.
-
podmanshRed Hat Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation 10.0 Critical -
podmanshRed Hat Panic parsing crafted input in x/text/secure/precis in golang.org/x/text 7.5 High -
podmanshRed Hat Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers 4.5 Medium -
podmanshRed Hat Tar extraction in moby/go-archive can write outside the destination directory via link following 7.1 High -
podmanshRed Hat Integer Overflow or Wraparound and Out-of-bounds Write in compress 7.5 High -
podmanshRed Hat Possible panic when incorrect parameters sent from frontend 6.3 Medium -
podmanshRed Hat BuildKit: Malicious client can bypass destination directory validation on local sources upload 7.2 High -
podmanshRed Hat Malicious client can bypass destination directory validation on local sources upload 6.9 Medium -
podmanshRed Hat WCOW cache mount source selector resolves NTFS junctions outside of cache root 5.6 Medium -
podmanshRed Hat Infinite loop on invalid input in golang.org/x/text 7.5 High -
podmanshRed Hat Podman: Malformed Image can trick podman run into leaking host environment variables into the container 7.5 High -
podmanshRed Hat Podman: WORKDIR symlink traversal vulnerability 5.3 Medium -
podmanshRed Hat OpenTelemetry-Go's Schema ParseFile leaks file descriptors on each parse 2.1 Low -
podmanshRed Hat PowerShell Command Injection in Podman HyperV Machine 4.0 Medium -
podmanshRed Hat Podman: podman kube play command may overwrite host files 8.1 High -
podmanshRed Hat Infinite loop in JSON unmarshaling in google.golang.org/protobuf 7.5 High