CVE-2021-4024: Infoleak
First published: Wed Nov 24 2021(Updated: )
A flaw was found in podman. The `podman machine` function (used to create and manage Podman virtual machine containing a Podman process) spawns a `gvproxy` process on the host system. The `gvproxy` API is accessible on port 7777 on all IP addresses on the host. If that port is open on the host's firewall, an attacker can potentially use the `gvproxy` API to forward ports on the host to ports in the VM, making private services on the VM accessible to the network. This issue could be also used to interrupt the host's services by forwarding all ports to the VM.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/podman | <2:4.2.0-3.el9 | 2:4.2.0-3.el9 |
| redhat/podman | <3.4.3 | 3.4.3 |
| Podman Project Podman | >=3.3.0<3.4.3 | |
| Fedoraproject Fedora | =34 | |
| Fedoraproject Fedora | =35 | |
| Redhat Enterprise Linux | =8.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.cve.org/CVERecord?id=CVE-2021-4024 https://nvd.nist.gov/vuln/detail/CVE-2021-4024
- https://bugzilla.redhat.com/show_bug.cgi?id=2026675
- https://access.redhat.com/errata/RHSA-2022:7954
- https://access.redhat.com/security/cve/cve-2021-4024
- https://bugzilla.redhat.com/show_bug.cgi?id=2026675,
- https://github.com/containers/podman/releases/tag/v3.4.3
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QFFVJ6S3ZRMPDYB7KYAWEMDHXFZYQPU3/
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2026676
- https://twitter.com/discordianfish/status/1463462371675066371
- https://github.com/containers/podman/commit/7ef3981abe2412727840a2886489a08c03a05299
- https://github.com/containers/podman/pull/12283
- https://bugzilla.redhat.com/show_bug.cgi?id=2026675%2C
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QFFVJ6S3ZRMPDYB7KYAWEMDHXFZYQPU3/
Frequently Asked Questions
What is CVE-2021-4024?
CVE-2021-4024 is a vulnerability found in the podman software that allows unauthorized access to the gvproxy API on port 7777.
What is the severity of CVE-2021-4024?
CVE-2021-4024 has a severity value of 6.5, which is classified as medium.
How does CVE-2021-4024 affect Podman?
CVE-2021-4024 affects Podman versions up to 2:4.2.0-3.el9 and versions up to 3.4.3, allowing unauthorized access to the gvproxy API on port 7777.
How can I fix CVE-2021-4024?
To fix CVE-2021-4024, update your Podman software to version 2:4.2.0-3.el9 or version 3.4.3 or later.
Where can I find more information about CVE-2021-4024?
You can find more information about CVE-2021-4024 at the following references: [CVE.org](https://www.cve.org/CVERecord?id=CVE-2021-4024), [NVD](https://nvd.nist.gov/vuln/detail/CVE-2021-4024), [Red Hat Bugzilla](https://bugzilla.redhat.com/show_bug.cgi?id=2026675), [Red Hat Errata](https://access.redhat.com/errata/RHSA-2022:7954).
- collector/redhat-cve
- collector/nvd-index
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- agent/remedy
- agent/author
- agent/references
- agent/severity
- agent/weakness
- agent/description
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2021-4024
- agent/software-canonical-lookup
- agent/tags
- agent/event
- collector/mitre-cve
- source/MITRE
- package-manager/redhat
- vendor/podman project
- canonical/podman project podman
- version/podman project podman/3.3.0
- vendor/fedoraproject
- canonical/fedoraproject fedora
- version/fedoraproject fedora/34
- version/fedoraproject fedora/35
- vendor/redhat
- canonical/redhat enterprise linux
- version/redhat enterprise linux/8.0