Known vulnerabilities in Podman - page 2

Software: Podman
Software CPE: cpe:2.3:a:containers:libpod:*:*:*:*:*:*:*:*
Total vulnerabilities: 38
Public exploits: 3
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Podman Podman is affected by 38 known vulnerabilities: 4 high, 17 medium, 17 low Critical High Medium Low

Vulnerabilities (38)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86038 - Incorrect Authorization
CVE-2024-23653
CWE-863 High
Available
No
4.9.2 02.02.2024 SB2024020229
SB2024020743
SB2024022237
and 23 more
#VU86037 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-23652
CWE-22 Medium
No
No
4.9.2 02.02.2024 SB2024020229
SB2024020743
SB2024022237
and 20 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795
CWE-326 Low
Available
No
4.8.3 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 344 more
#VU77535 - Insufficient Verification of Data Authenticity
CWE-345 Low
No
No
4.0.0 rc1 20.06.2023 SB2023062006
SB2023062011
#VU74843 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2023-0778
CWE-367 Medium
No
No
4.4.2 11.04.2023 SB2023041130
SB2023041131
SB2023051738
and 10 more
#VU72686 - Resource exhaustion
CVE-2022-41723
CWE-400 Medium
No
No
4.4.3 01.03.2023 SB2023030130
SB2023030131
SB2023030946
and 190 more
#VU69290 - Incorrect Authorization
CVE-2022-2989
CWE-863 Low
No
No
4.3.0 14.11.2022 SB2022111428
SB2022111429
SB2022111430
and 14 more
#VU62468 - Permissions, Privileges, and Access Controls
CVE-2022-1227
CWE-264 Medium
Available
No
3.4.7 21.04.2022 SB2022042124
SB2022051166
SB2022051217
and 14 more
#VU62039 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-27191
CWE-327 Medium
No
No
3.4.6 10.04.2022 SB2022041004
SB2022041406
SB2022081226
and 91 more
#VU61829 - Permissions, Privileges, and Access Controls
CVE-2022-27649
CWE-264 Medium
No
No
3.4.5, 4.0.3 04.04.2022 SB2022040410
SB2022042012
SB2022042725
and 14 more
#VU58668 - Exposure of sensitive information to an unauthorized actor
CVE-2021-4024
CWE-200 Low
No
No
3.4.3 08.12.2021 SB2021120807
SB2022111597
SB2023012731
and 7 more
#VU58229 - Type confusion
CVE-2021-41190
CWE-843 Low
No
No
3.4.3 18.11.2021 SB2021111806
SB2021111807
SB2021111809
and 39 more
#VU54940 - Exposure of sensitive information to an unauthorized actor
CVE-2021-3602
CWE-200 Low
No
No
3.2.3 19.07.2021 SB2021071902
SB2021072007
SB2022092037
and 7 more
#VU51017 - Permissions, Privileges, and Access Controls
CVE-2021-20188
CWE-264 Low
No
No
1.7.0 02.03.2021 SB2021030203
SB2021030204
SB2021030406
and 3 more
#VU50275 - Origin Validation Error
CVE-2021-20199
CWE-346 High
No
No
3.0.0 02.02.2021 SB2021020306
SB2022092037
SB2022111597
and 3 more
#VU47117 - Exposure of sensitive information to an unauthorized actor
CVE-2020-14370
CWE-200 Low
No
No
2.0.5 23.09.2020 SB2020092707
SB2020092708
SB2020092808
and 7 more
#VU26515 - UNIX Symbolic Link (Symlink) Following
CVE-2019-18466
CWE-61 Medium
No
No
1.6.0 01.04.2020 SB2019102810
SB2020040149
SB2020040151
#VU25983 - Permissions, Privileges, and Access Controls
CVE-2020-1726
CWE-264 Low
No
No
1.8.1 rc4 11.03.2020 SB2020021172
SB2020031126
SB2020042902
and 3 more


Showing elements 21 - 40 out of 38