Libpod Libpodproject Libpod

Do you want an email whenever new security vulnerabilities are reported in Libpodproject Libpod?

By the Year

In 2024 there have been 0 vulnerabilities in Libpodproject Libpod . Libpod did not have any published security vulnerabilities last year.

Year Vulnerabilities Average Score
2024 0 0.00
2023 0 0.00
2022 0 0.00
2021 0 0.00
2020 1 5.90
2019 3 6.20
2018 1 8.80

It may take a day or so for new Libpod vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Libpodproject Libpod Security Vulnerabilities

A flaw was discovered in Podman where it incorrectly

CVE-2020-1726 5.9 - Medium - February 11, 2020

A flaw was discovered in Podman where it incorrectly allows containers when created to overwrite existing files in volumes, even if they are mounted as read-only. When a user runs a malicious container or a container based on a malicious image with an attached volume that is used for the first time, it is possible to trigger the flaw and overwrite files in the volume.This issue was introduced in version 1.6.0.

Files or Directories Accessible to External Parties

The containers/image library used by the container tools Podman

CVE-2019-10214 5.9 - Medium - November 25, 2019

The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift Container Platform, does not enforce TLS connections to the container registry authorization service. An attacker could use this vulnerability to launch a MiTM attack and steal login credentials or bearer tokens.

Insufficiently Protected Credentials

An issue was discovered in Podman in libpod before 1.6.0

CVE-2019-18466 5.5 - Medium - October 28, 2019

An issue was discovered in Podman in libpod before 1.6.0. It resolves a symlink in the host context during a copy operation from the container to the host, because an undesired glob operation occurs. An attacker could create a container image containing particular symlinks that, when copied by a victim user to the host filesystem, may overwrite existing files with others from the host.

insecure temporary file

A path traversal vulnerability has been discovered in podman before version 1.4.0 in the way it handles symlinks inside containers

CVE-2019-10152 7.2 - High - July 30, 2019

A path traversal vulnerability has been discovered in podman before version 1.4.0 in the way it handles symlinks inside containers. An attacker who has compromised an existing container can cause arbitrary files on the host filesystem to be read/written when an administrator tries to copy a file from/to the container.

Directory traversal

It has been discovered that podman before version 0.6.1 does not drop capabilities when executing a container as a non-root user

CVE-2018-10856 8.8 - High - July 03, 2018

It has been discovered that podman before version 0.6.1 does not drop capabilities when executing a container as a non-root user. This results in unnecessary privileges being granted to the container.

Incorrect Permission Assignment for Critical Resource

Stay on top of Security Vulnerabilities

Want an email whenever new vulnerabilities are published for Libpodproject Libpod or by Libpodproject? Click the Watch button to subscribe.

subscribe