REDHAT-BUG-1744588: Medium severity containers podman vulnerability
'podman cp' will resolve a carefully crafted symlink in host-filesystem space, yielding unexpected results when cp'ing from container to host. An attacker could create a container image containing particular symlinks that, when copied by a victim user to the host filesystem, may overwrite existing files with others from the host.
Upstream Issue: https://github.com/containers/libpod/issues/3829
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1744588?
The severity of REDHAT-BUG-1744588 is considered to be significant due to the potential for filesystem overwrite vulnerabilities.
How do I fix REDHAT-BUG-1744588?
To fix REDHAT-BUG-1744588, it's recommended to update to the latest version of Podman where this vulnerability has been addressed.
Can REDHAT-BUG-1744588 be exploited remotely?
No, REDHAT-BUG-1744588 requires an attacker to craft a container image that must then be copied by the victim user.
What should I avoid doing to mitigate REDHAT-BUG-1744588?
To mitigate REDHAT-BUG-1744588, avoid copying files from untrusted container images that may contain symlinks.
What is the impact of REDHAT-BUG-1744588?
The impact of REDHAT-BUG-1744588 can lead to unintentional overwriting of files on the host filesystem, potentially causing data loss or system corruption.