CVE-2022-1227: High severity centos podman vulnerability
A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem, leading to information disclosure or denial of service.
Other sources
For containers which utilize user namepsaces, running 'podman top' triggers the nsenter binary inside a container. The root issue is in github.com/containers/psgo. Podman top doesn't join the user namespace of the container. This could enable an attacker to create a malicious nsenter binary which provides erroneous results to podman top, make syscalls, and other operations beyond what is normally allowed for the container.
— Red Hat
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the vulnerability ID for this flaw in Podman?
The vulnerability ID for this flaw in Podman is CVE-2022-1227.
What is the severity of CVE-2022-1227?
CVE-2022-1227 has a severity rating of 8.8 (high).
How does CVE-2022-1227 impact Podman?
CVE-2022-1227 allows an attacker to publish a malicious image to a public registry in Podman, leading to privilege escalation.
What software versions are affected by CVE-2022-1227?
Podman versions 0:1.6.4-32.el7_9 through 3.4 and psgo versions up to 1.7.2 are affected by CVE-2022-1227.
Where can I find more information about CVE-2022-1227?
You can find more information about CVE-2022-1227 at the following references: [1] [2] [3]