PT-2021-7850 · Podman+7 · Podman+7
Nick Tait
·
Published
2021-07-15
·
Updated
2025-08-28
·
CVE-2022-1227
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Podman (affected versions not specified)
Description
A privilege escalation flaw in Podman allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command, giving the attacker access to the host filesystem and potentially leading to information disclosure or denial of service. The issue is related to incorrect privilege management when running 'podman top' in a container created from a malicious image.
Recommendations
As a temporary workaround, consider disabling the
podman top command until a patch is available.
Restrict access to the nsenter binary to minimize the risk of exploitation.
Avoid using untrusted sources for the nsenter binary.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
DoS
Improper Privilege Management
Improper Preservation of Permissions
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Centos
Podman
Red Hat
Red Os
Rocky Linux
Suse