PT-2022-8289 · Podman+2 · Podman+2

Jeremy Brown + 1 · Published 2019-10-29 · Updated 2024-05-17 · CVE-2019-25067

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Podman and Varlink version 1.5.1

Description A critical issue was found, affecting an unknown part of the component API. This leads to Remote Privilege Escalation and can be initiated remotely. The exploit has been disclosed publicly.

Recommendations For Podman and Varlink version 1.5.1, update to a version that addresses the Remote Privilege Escalation issue. As a temporary workaround, consider restricting access to the affected API component until a patch is available.

Exploit

Fix

Related Identifiers

ALT-PU-2019-3062

ALT-PU-2020-1645

CVE-2019-25067

Affected Products

Alt Linux

Podman

Varlink

References · 13

• 🔥 https://exploit-db.com/exploits/47500 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25067 · Security Note
• https://cve.org/CVERecord?id=CVE-2019-25067 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-25067 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-25067 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-25067 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-25067 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-25067 · Vendor Advisory
• https://github.com/containers/podman/issues/21628 · Note
• https://vuldb.com/?id.143949 · Note
• https://vuldb.com/?ctiid.143949 · Note
• https://t.me/cvenotify/71695 · Telegram Post
• https://twitter.com/markesler/status/1768332687339647218 · Twitter Post