Privilege Escalation Vulnerability in Podman and Related Packages
Summary
CVE-2022-1227: A privilege escalation flaw was found in Podman. Affects golang-github-containers-psgo across 3 version ranges.
< 1.5.2-1+deb11u1
< 84c8870ac236578c41713113fc09a29a5f727bdd
< 3145d6da8a3ca85636b1546e8d19e11118cd6f02
Fixed in 1.5.2-1+deb11u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Podman is a container management tool that allows users to manage containers and images without requiring a daemon. It is designed to be a drop-in replacement for Docker, providing a similar command-line interface while focusing on security and simplicity. The vulnerability in question affects the 'golang-github-containers-psgo' and 'libpod' packages, which are integral to Podman's functionality, enabling users to run and manage containers securely. However, this vulnerability exposes users to potential privilege escalation attacks, compromising the integrity of the host system.
Vulnerability Detail
A privilege escalation flaw was discovered in Podman, allowing an attacker to publish a malicious image to a public registry. When a victim downloads this image and executes the 'podman top' command, the vulnerability is triggered, granting the attacker access to the host filesystem. This can lead to information disclosure or denial of service, posing significant risks to system security and data integrity.
How To Fix
Minimum fixed version
1.5.2-1+deb11u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade golang-github-containers-psgoTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can avoid using the 'podman top' command until the packages are updated. This will help mitigate the risk of triggering the vulnerability while waiting for a patch.
Conclusion
The privilege escalation vulnerability CVE-2022-1227 in Podman poses significant risks to users by allowing unauthorized access to the host filesystem. It is crucial to update the affected packages promptly to mitigate these risks. Users can also utilize Vulert to monitor their applications for vulnerabilities without needing to install additional software.
See every vulnerability recorded for golang-github-containers-psgo →
FAQ
CVE-2022-1227 is a privilege escalation vulnerability in Podman that allows attackers to gain unauthorized access to the host filesystem.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software by checking your manifest file like package-lock.json.
Exploitation of this vulnerability can lead to information disclosure or denial of service, compromising the security of the host system.
Use the command 'sudo apt update' followed by 'sudo apt install <package-name>=<version>' to update the affected packages to their fixed versions.
Yes, avoid using the 'podman top' command until the packages are updated to reduce the risk of exploitation.
Related vulnerabilities
Recent vulnerabilities recorded for golang-github-containers-psgo.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
