REDHAT-BUG-2393152: High severity Podman Podman vulnerability
The podman kube play command can overwrite host files when the kube file contains a ConfigMap or Secret volume mount and the volume already contains a symlink to a host file. This allows a malicious container to write to arbitrary files on the host but the attacker only controls the target path not the contents that will be written to file. The contents are defined in the yaml file by the end user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2393152?
The severity of REDHAT-BUG-2393152 is critical as it allows malicious containers to overwrite arbitrary host files.
How do I fix REDHAT-BUG-2393152?
To fix REDHAT-BUG-2393152, avoid using ConfigMap or Secret volume mounts that can link to sensitive host files.
What software is affected by REDHAT-BUG-2393152?
The affected software for REDHAT-BUG-2393152 is Podman, specifically with the kube play command.
What is the risk associated with REDHAT-BUG-2393152?
The risk associated with REDHAT-BUG-2393152 includes unauthorized file modifications on the host system by a malicious container.
Can REDHAT-BUG-2393152 be exploited remotely?
Yes, REDHAT-BUG-2393152 can potentially be exploited remotely if an attacker can deploy a malicious container with the proper configurations.