6.8
Moyenne
CVE-2023-0778 A Time-of-check Time-of-use (TOCTOU) flaw was found in podman
Description
A Time-of-check Time-of-use (TOCTOU) flaw was found in podman. This issue may allow a malicious user to replace a normal file in a volume with a symlink while exporting the volume, allowing for access to arbitrary files on the host file system.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Podman | Versions non publiées |
Références
- bugzilla.redhat.com bugzilla.redhat.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Podman
Les 12 CVE de Podman →
CVE-2022-4123
A flaw was found in Buildah
3.3
Faible
CVE-2022-4122
A vulnerability was found in buildah
5.3
Moyenne
CVE-2022-2989
An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information…
7.1
Élevée
CVE-2022-2739
The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an…
Non notée