Not rated
CVE-2021-20199 Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 (including from remote…
Description
Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 (including from remote hosts). This impacts containerized applications that trust localhost (127.0.01) connections by default and do not require authentication. This issue affects Podman 1.8.0 onwards.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Podman | Versions not published |
References
- bugzilla.redhat.com bugzilla.redhat.com
- github.com github.com
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of Podman
The 12 CVEs of Podman →
CVE-2023-0778
A Time-of-check Time-of-use (TOCTOU) flaw was found in podman
6.8
Medium
CVE-2022-4122
A vulnerability was found in buildah
5.3
Medium
CVE-2022-4123
A flaw was found in Buildah
3.3
Low
CVE-2022-2989
An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information…
7.1
High