Strix
26.1K

CVE-2022-1227

HIGHCVSS 8.8/10EPSS 4.24%

Last modified

CVE-2022-1227 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. EPSS estimates a 4.24% chance of exploitation in the next 30 days.

Description

A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem, leading to information disclosure or denial of service.

Metrics

CVSS 3.1
8.8/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Probability
4.24%

89.8th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
Podman ProjectPodman< 4.0.0
Psgo ProjectPsgo< 1.7.2
RedhatDeveloper Tools1.0
RedhatEnterprise Linux Server Update Services For Sap Solutions8.6
RedhatOpenshift Container Platform4.0
RedhatQuay3.0.0
RedhatEnterprise Linux7.0
RedhatEnterprise Linux8.0
RedhatEnterprise Linux Eus8.6
RedhatEnterprise Linux For Ibm Z Systems7.0
RedhatEnterprise Linux For Ibm Z Systems8.6
RedhatEnterprise Linux For Power Little Endian7.0
RedhatEnterprise Linux For Power Little Endian8.6
RedhatEnterprise Linux Server7.0
RedhatEnterprise Linux Server Aus8.6
RedhatEnterprise Linux Server For Power Little Endian Update Services For Sap Solutions8.6
RedhatEnterprise Linux Server Tus8.6
RedhatEnterprise Linux Workstation7.0
FedoraprojectFedora34
FedoraprojectFedora35

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2022-1227?
A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem, leading to information disclosure or denial of service.
How severe is CVE-2022-1227?
CVE-2022-1227 has a CVSS score of 8.8/10 (HIGH severity). The EPSS model estimates a 4.24% probability of exploitation in the next 30 days.
How do I fix CVE-2022-1227?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2022-1227?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST