podman
17 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-4953 | * | Podman: build context bind mount | HIGH 7.4 | 0.6 % | ||
| CVE-2025-9566 | 4.0.0 – < 5.6.1 | Podman: podman kube play command may overwrite host files | HIGH 8.1 | 1.2 % | ||
| CVE-2025-6032 | 4.8.0 – < 5.5.2 | Podman: podman missing tls verification | HIGH 8.3 | 0.5 % | ||
| CVE-2024-9407 | < 5.2.4 | Buildah: podman: improper input validation in bind-propagation option of dockerfile run --mount instruction | MEDIUM 4.7 | 0.3 % | ||
| CVE-2024-3056 | 5.0.0 | Podman: kernel: containers in shared ipc namespace are vulnerable to denial of service attack | HIGH 7.7 | 0.5 % | ||
| CVE-2023-0778 | unknown | A Time-of-check Time-of-use (TOCTOU) flaw was found in podman. This issue may allow a malicious user to replace a normal file in a volume wi | MEDIUM 6.8 | 0.5 % | ||
| CVE-2022-4123 | Podman 4.3.0 | A flaw was found in Buildah. The local path and the lowest subdirectory may be disclosed due to incorrect absolute path traversal, resulting | LOW 3.3 | 0.2 % | ||
| CVE-2022-4122 | Podman 4.3.0 | A vulnerability was found in buildah. Incorrect following of symlinks while reading .containerignore and .dockerignore results in informatio | MEDIUM 5.3 | 0.9 % | ||
| CVE-2022-2989 | no fixed version known | An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possi | HIGH 7.1 | 0.3 % | ||
| CVE-2022-2739 | podman 1.6.4-32.el7_9 | The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman | MEDIUM 5.3 | 0.5 % | ||
| CVE-2022-2738 | podman 1.6.4-32.el7_9 | The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman | HIGH 7.5 | 0.9 % | ||
| CVE-2019-25067 | 1.5.1 | Podman/Varlink API Privilege Escalation | HIGH 8.8 | 2.6 % | ||
| CVE-2022-27649 | Affects all versions before v4.0.3, Fixed in - v4.0.3 | A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby | HIGH 7.5 | 1.4 % | ||
| CVE-2021-4024 | podman 3.4.3 | A flaw was found in podman. The `podman machine` function (used to create and manage Podman virtual machine containing a Podman process) spa | MEDIUM 6.5 | 1.1 % | ||
| CVE-2021-20188 | podman 1.7.0 | A flaw was found in podman before 1.7.0. File permissions for non-root users running in a privileged container are not correctly checked. Th | HIGH 7.0 | 0.3 % | ||
| CVE-2021-20199 | podman 1.8.0 onwards | Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 (including from remote hosts). This impacts c | MEDIUM 5.9 | 1.2 % | ||
| CVE-2020-14370 | podman versions before 2.0.5 | An information disclosure vulnerability was found in containers/podman in versions before 2.0.5. When using the deprecated Varlink API or th | MEDIUM 5.3 | 1.4 % |