6.8
Medium
CVE-2023-0778 A Time-of-check Time-of-use (TOCTOU) flaw was found in podman
Description
A Time-of-check Time-of-use (TOCTOU) flaw was found in podman. This issue may allow a malicious user to replace a normal file in a volume with a symlink while exporting the volume, allowing for access to arbitrary files on the host file system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Podman | Versions not published |
References
- bugzilla.redhat.com bugzilla.redhat.com
Timeline
- Published
- Last modified
Other CVEs of Podman
The 12 CVEs of Podman →
CVE-2022-4123
A flaw was found in Buildah
3.3
Low
CVE-2022-4122
A vulnerability was found in buildah
5.3
Medium
CVE-2022-2989
An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information…
7.1
High
CVE-2022-2739
The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an…
Not rated