Vulnetix
Try Vulnetix Request Demo
CVE-2019-18466 PUBLISHED CVSS 5.800000190734863 MEDIUM

An issue was discovered in Podman in libpod before 1.6.0. It resolves a symlink in the host context during a copy operation from the container to the host, because an undesired glob operation occurs. An attacker could create a container image containing particular symlinks that, when copied by a victim user to the host filesystem, may overwrite existing files with others from the host.

EPSS 0.84% · 74.6th percentile

Risk Scores

CVSS v2.0
5.800000190734863
EPSS Score
0.84%
74.6th percentile

Affected Products

VendorProductVersions
libpod_projectlibpod0
n/an/an/a
github.comcontainers/podman/v40

Timeline

References

Open in Interactive Console →