Non notée
CVE-2022-2738 The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an…
Description
The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-8945, which was previously fixed via RHSA-2020:2117. This issue could possibly be used to crash or cause potential code execution in Go applications that use the Go GPGME wrapper library, under certain conditions, during GPG signature verification.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Podman | Versions non publiées |
Références
- bugzilla.redhat.com bugzilla.redhat.com
- access.redhat.com access.redhat.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Podman
Les 12 CVE de Podman →
CVE-2023-0778
A Time-of-check Time-of-use (TOCTOU) flaw was found in podman
6.8
Moyenne
CVE-2022-4122
A vulnerability was found in buildah
5.3
Moyenne
CVE-2022-4123
A flaw was found in Buildah
3.3
Faible
CVE-2022-2989
An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information…
7.1
Élevée