Podman vulnerabilities
We track 3 vulnerabilities in Podman products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 13, 2022.
Latest Podman vulnerabilities
- 7.1 High severity
podman: Incorrect Authorization
An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to
- 7.5 High severity
podman: Use After Free
The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-8945, which was previously fixed via RHSA-2020:2117. This issue could possibly be used to c
- 7.5 High severity
podman: Incorrect Default Permissions
A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby (Docker Engine), where containers were started incorrectly with non-empty inheritable Linux process capabilities. This f