CVE-2022-1227
A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem, leading to information disclosure or denial of service.
Published:Jul 15, 2021
Last Modified:Nov 21, 2024
EPS:Apr 29, 2022
EPSS Score:0.34745
CVSS Score:8.8
Affected Products
Vendor
Product
Action
Vendor
Fedoraproject
Product
Fedora
Fedoraproject
Fedora
Vendor
Podman Project
Product
Podman
Podman Project
Podman
Vendor
Psgo Project
Product
Psgo
Psgo Project
Psgo
Vendor
Redhat
Product
Developer Tools
Redhat
Developer Tools
Vendor
Redhat
Product
Enterprise Linux
Redhat
Enterprise Linux
Vendor
Redhat
Product
Enterprise Linux Eus
Redhat
Enterprise Linux Eus
Vendor
Redhat
Product
Enterprise Linux For Ibm Z Systems
Redhat
Enterprise Linux For Ibm Z Systems
Vendor
Redhat
Product
Enterprise Linux For Power Little Endian
Redhat
Enterprise Linux For Power Little Endian
Vendor
Redhat
Product
Enterprise Linux Server
Redhat
Enterprise Linux Server
Vendor
Redhat
Product
Enterprise Linux Server Aus
Redhat
Enterprise Linux Server Aus
Vendor
Redhat
Product
Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions
Redhat
Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions
Vendor
Redhat
Product
Enterprise Linux Server Tus
Redhat
Enterprise Linux Server Tus
Vendor
Redhat
Product
Enterprise Linux Server Update Services For Sap Solutions
Redhat
Enterprise Linux Server Update Services For Sap Solutions
Vendor
Redhat
Product
Enterprise Linux Workstation
Redhat
Enterprise Linux Workstation
Vendor
Redhat
Product
Openshift
Redhat
Openshift
Vendor
Redhat
Product
Openshift Container Platform
Redhat
Openshift Container Platform
Vendor
Redhat
Product
Quay
Redhat
Quay
Vendor
Redhat
Product
Rhel Eus
Redhat
Rhel Eus
Vendor
Redhat
Product
Rhel Extras Other
Redhat
Rhel Extras Other
Exploits
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
