python-podman-api vulnerabilities (Red Hat)
27 vulnerabilities.
-
python-podman-apiRed Hat runc container breakout through process.cwd trickery and leaked fds 8.6 High -
python-podman-apiRed Hat Podman publishes a malicious image to public registries 8.8 High -
python-podman-apiRed Hat Podman's default inheritable capabilities for linux container not empty 7.5 High -
python-podman-apiRed Hat Non-empty default inheritable capabilities for linux container in Buildah 6.8 Medium -
python-podman-apiRed Hat Buildah processes using chroot isolation may leak environment values to intermediate processes 5.5 Medium -
python-podman-apiRed Hat mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs 8.5 High -
python-podman-apiRed Hat Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service. 7.5 High -
python-podman-apiRed Hat Information disclosure in podman 5.3 Medium -
python-podman-apiRed Hat Improper Authorization in github.com/containers/libpod 7.0 High -
python-podman-apiRed Hat Important: virt:rhel security update 6.5 Medium -
python-podman-apiRed Hat golang.org/x/text Infinite loop 7.5 High -
python-podman-apiRed Hat containernetworking/plugins vulnerable to MitM attacks 6.0 Medium -
python-podman-apiRed Hat A malicious container image can consume an unbounded amount of memory when being pulled to a... 3.3 Low -
python-podman-apiRed Hat libslirp: use after free vulnerability cause a denial of service. 7.5 High -
python-podman-apiRed Hat Path Traversal in Buildah 8.8 High -
python-podman-apiRed Hat Podman has Files or Directories Accessible to External Parties 5.9 Medium -
python-podman-apiRed Hat opencontainers runc contains procfs race condition with a shared volume mount 7.0 High -
python-podman-apiRed Hat In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a... 5.6 Medium -
python-podman-apiRed Hat tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as... 5.6 Medium -
python-podman-apiRed Hat Podman Symlink Vulnerability 5.5 Medium -
python-podman-apiRed Hat Incorrect Authorization in runc 7.5 High -
python-podman-apiRed Hat containers/image library Insufficiently Protects Credentials 6.4 Medium -
python-podman-apiRed Hat libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c. 7.5 High -
python-podman-apiRed Hat Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service 7.5 High -
python-podman-apiRed Hat Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service 7.5 High -
python-podman-apiRed Hat ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet... 8.8 High -
python-podman-apiRed Hat Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network... 7.5 High