跳转到帖子

Gentoo Linux: CVE-2023-0778: podman: Multiple Vulnerabilities

recommended_posts

发布于
  • Members

Gentoo Linux: CVE-2023-0778: podman: Multiple Vulnerabilities

Severity
8
CVSS
(AV:N/AC:M/Au:S/C:C/I:C/A:N)
Published
03/27/2023
Created
07/09/2024
Added
07/09/2024
Modified
01/28/2025

Description

A Time-of-check Time-of-use (TOCTOU) flaw was found in podman. This issue may allow a malicious user to replace a normal file in a volume with a symlink while exporting the volume, allowing for access to arbitrary files on the host file system.

Solution(s)

  • gentoo-linux-upgrade-app-containers-podman

References

  • https://attackerkb.com/topics/cve-2023-0778
  • CVE - 2023-0778
  • 202407-12
  • 查看数 697
  • 已创建
  • 最后回复