← Database

CVE-2022-1227

HIGH CVSS: 8.8 Published: 2022-04-29 Modified: 2026-06-17

Description

A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem, leading to information disclosure or denial of service.

Affected Platforms

Redhat Developer ToolsRedhat Enterprise Linux Server Update Services For Sap SolutionsRedhat Enterprise Linux Server TusRedhat Enterprise LinuxRedhat Enterprise Linux EusRedhat Enterprise Linux For Power Little EndianRedhat Enterprise Linux WorkstationRedhat Enterprise Linux ServerFedoraproject FedoraRedhat Openshift Container Platform

Weakness Type

CWE-281, CWE-269

References