Skip to content
OpenAdvisories
High · 8.8 Public exploit CVE-2022-1227 EUVD-2022-1644GHSA-66vw-v2x9-hw75GO-2022-0558

Podman publishes a malicious image to public registries

Published Apr 29, 2022 · Updated Aug 2, 2024 · Assigned by redhat

Description

A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem, leading to information disclosure or denial of service.

Affected products

VendorProductAffectedFixed
— psgo podman 4.0, psgo 1.7.2 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 golang-github-containers-psgo 1.7.1+ds1-1 —
Debian 13 golang-github-containers-psgo 1.7.1+ds1-1 —
Debian 12 golang-github-containers-psgo 1.7.1+ds1-1 —
Debian 12 libpod 3.4.7+ds1-1 —
ReleasePackageFixed inAdvisory
Ubuntu 26.10 golang-github-containers-psgo No fix yet —
Ubuntu 26.04 LTS golang-github-containers-psgo No fix yet —
Ubuntu 25.10 golang-github-containers-psgo No fix yet —
Ubuntu 24.04 LTS golang-github-containers-psgo No fix yet —
Ubuntu 22.04 LTS golang-github-containers-psgo No fix yet —
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS golang-github-containers-psgo No fix yet —
ReleasePackageFixed inAdvisory
RHEL 8 buildah +1 1.19.9-3.module+el8.6.0+14874+64436299 RHSA-2022:2143, RHSA-2022:1762
RHEL 8 cockpit-podman 29-2.module+el8.6.0+14874+64436299 RHSA-2022:2143, RHSA-2022:1762
RHEL 8 conmon 2:2.0.26-1.module+el8.6.0+14874+64436299 RHSA-2022:2143, RHSA-2022:1762
RHEL 8 container-selinux 2:2.178.0-2.module+el8.6.0+14874+64436299 RHSA-2022:2143, RHSA-2022:1762
RHEL 8 containernetworking-plugins 0.9.1-1.module+el8.6.0+14874+64436299 RHSA-2022:2143, RHSA-2022:1762
RHEL 8 crit +2 3.15-1.module+el8.6.0+14874+64436299 RHSA-2022:2143, RHSA-2022:1762
RHEL 8 criu-libs +1 3.15-3.module+el8.6.0+14673+621cb8be RHSA-2022:1762
RHEL 8 crun 0.18-3.module+el8.6.0+14874+64436299 RHSA-2022:2143, RHSA-2022:1762
RHEL 8 fuse-overlayfs 1.4.0-2.module+el8.6.0+14874+64436299 RHSA-2022:2143, RHSA-2022:1762
RHEL 8 libslirp +1 4.3.1-1.module+el8.6.0+14874+64436299 RHSA-2022:2143, RHSA-2022:1762
RHEL 8 netavark +1 2:1.0.1-27.module+el8.6.0+14673+621cb8be RHSA-2022:1762
RHEL 8 oci-seccomp-bpf-hook 1.2.0-3.module+el8.6.0+14874+64436299 RHSA-2022:2143, RHSA-2022:1762
RHEL 8 podman +5 3.0.1-9.module+el8.6.0+14874+64436299 RHSA-2022:2143, RHSA-2022:1762
RHEL 8 podman-gvproxy 2:4.0.2-6.module+el8.6.0+14673+621cb8be RHSA-2022:1762
RHEL 8 python-podman +1 4.0.0-1.module+el8.6.0+14673+621cb8be RHSA-2022:1762
RHEL 8 runc 1.0.0-73.rc95.module+el8.6.0+14874+64436299 RHSA-2022:2143, RHSA-2022:1762
RHEL 8 skopeo +2 1:1.2.4-1.module+el8.6.0+14874+64436299 RHSA-2022:2143, RHSA-2022:1762
RHEL 8 slirp4netns 1.1.8-1.module+el8.6.0+14874+64436299 RHSA-2022:2143, RHSA-2022:1762
RHEL 8 toolbox +1 0.0.99.3-0.4.module+el8.6.0+14673+621cb8be RHSA-2022:2143, RHSA-2022:1762
RHEL 8 udica 0.2.4-1.module+el8.6.0+14874+64436299 RHSA-2022:2143, RHSA-2022:1762
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Rhel Extras Other 7 podman +1 1.6.4-32.el7_9 RHSA-2022:2190
RHEL 8.4 EUS buildah +1 1.19.9-1.module+el8.4.0+14872+9efa52a3 RHSA-2022:5622, RHSA-2022:4816
RHEL 8.4 EUS cockpit-podman 29-2.module+el8.4.0+14872+9efa52a3 RHSA-2022:5622, RHSA-2022:4816
RHEL 8.4 EUS conmon 2:2.0.26-1.module+el8.4.0+14872+9efa52a3 RHSA-2022:5622, RHSA-2022:4816
RHEL 8.4 EUS container-selinux 2:2.167.0-1.module+el8.4.0+14872+9efa52a3 RHSA-2022:5622, RHSA-2022:4816
RHEL 8.4 EUS containernetworking-plugins 0.9.1-1.module+el8.4.0+14872+9efa52a3 RHSA-2022:5622, RHSA-2022:4816
RHEL 8.4 EUS crit +2 3.15-1.module+el8.4.0+14872+9efa52a3 RHSA-2022:5622, RHSA-2022:4816
RHEL 8.4 EUS crun 0.18-2.module+el8.4.0+14872+9efa52a3 RHSA-2022:5622, RHSA-2022:4816
RHEL 8.4 EUS fuse-overlayfs 1.4.0-2.module+el8.4.0+14872+9efa52a3 RHSA-2022:5622, RHSA-2022:4816
RHEL 8.4 EUS libslirp +1 4.3.1-1.module+el8.4.0+14872+9efa52a3 RHSA-2022:5622, RHSA-2022:4816
RHEL 8.4 EUS oci-seccomp-bpf-hook 1.2.0-1.module+el8.4.0+14872+9efa52a3 RHSA-2022:5622, RHSA-2022:4816
RHEL 8.4 EUS podman +5 3.0.1-9.module+el8.4.0+14872+9efa52a3 RHSA-2022:5622, RHSA-2022:4816
RHEL 8.4 EUS runc 1.0.0-74.rc95.module+el8.4.0+14908+81312c48 RHSA-2022:5622, RHSA-2022:4816
RHEL 8.4 EUS skopeo +2 1:1.2.2-8.module+el8.4.0+14872+9efa52a3 RHSA-2022:5622, RHSA-2022:4816
RHEL 8.4 EUS slirp4netns 1.1.8-1.module+el8.4.0+14872+9efa52a3 RHSA-2022:5622, RHSA-2022:4816
RHEL 8.4 EUS toolbox 0.0.8-1.module+el8.4.0+14872+9efa52a3 RHSA-2022:5622, RHSA-2022:4816
RHEL 8.4 EUS udica 0.2.4-1.module+el8.4.0+14872+9efa52a3 RHSA-2022:5622, RHSA-2022:4816
RHEL 8.2 EUS buildah +1 1.11.6-8.module+el8.2.0+14896+bf621b2a RHSA-2022:4651
RHEL 8.2 EUS cockpit-podman 11-1.module+el8.2.0+14896+bf621b2a RHSA-2022:4651
RHEL 8.2 EUS conmon 2:2.0.6-1.module+el8.2.0+14896+bf621b2a RHSA-2022:4651
RHEL 8.2 EUS container-selinux 2:2.124.0-1.module+el8.2.0+14896+bf621b2a RHSA-2022:4651
RHEL 8.2 EUS containernetworking-plugins 0.8.3-4.module+el8.2.0+14896+bf621b2a RHSA-2022:4651
RHEL 8.2 EUS crit +2 3.12-9.module+el8.2.0+14896+bf621b2a RHSA-2022:4651
RHEL 8.2 EUS fuse-overlayfs 0.7.2-5.module+el8.2.0+14896+bf621b2a RHSA-2022:4651
RHEL 8.2 EUS podman +3 1.6.4-24.module+el8.2.0+14896+bf621b2a RHSA-2022:4651
RHEL 8.2 EUS python-podman-api 1.2.0-0.2.gitd0a45fe.module+el8.2.0+14896+bf621b2a RHSA-2022:4651
RHEL 8.2 EUS runc 1.0.0-65.rc10.module+el8.2.0+14896+bf621b2a RHSA-2022:4651
RHEL 8.2 EUS skopeo +2 1:0.1.40-9.module+el8.2.0+14896+bf621b2a RHSA-2022:4651
RHEL 8.2 EUS slirp4netns 0.4.2-3.git21fdece.module+el8.2.0+14896+bf621b2a RHSA-2022:4651
RHEL 8.2 EUS toolbox 0.0.7-1.module+el8.2.0+14896+bf621b2a RHSA-2022:4651
RHEL 8.2 EUS udica 0.2.1-2.module+el8.2.0+14896+bf621b2a RHSA-2022:4651
Red Hat OpenShift 4 podman +3 1.9.3-5.rhaos4.6.el8 RHSA-2022:2263

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 8 buildah +1 1.19.9-3.module_el8.6.0+2876+9ed4eae2 ALSA-2022:2143, ALSA-2022:1762
AlmaLinux 8 cockpit-podman 29-2.module_el8.6.0+2876+9ed4eae2 ALSA-2022:2143, ALSA-2022:1762
AlmaLinux 8 conmon 2:2.0.26-1.module_el8.6.0+2876+9ed4eae2 ALSA-2022:2143, ALSA-2022:1762
AlmaLinux 8 container-selinux 2:2.178.0-2.module_el8.6.0+2876+9ed4eae2 ALSA-2022:2143, ALSA-2022:1762
AlmaLinux 8 containernetworking-plugins 0.9.1-1.module_el8.6.0+2876+9ed4eae2 ALSA-2022:2143, ALSA-2022:1762
AlmaLinux 8 crit +2 3.15-1.module_el8.6.0+2876+9ed4eae2 ALSA-2022:2143, ALSA-2022:1762
AlmaLinux 8 criu-libs +1 3.15-3.module_el8.6.0+2751+06427ca3 ALSA-2022:1762
AlmaLinux 8 crun 0.18-3.module_el8.6.0+2876+9ed4eae2 ALSA-2022:2143, ALSA-2022:1762
AlmaLinux 8 fuse-overlayfs 1.4.0-2.module_el8.6.0+2876+9ed4eae2 ALSA-2022:2143, ALSA-2022:1762
AlmaLinux 8 libslirp +1 4.3.1-1.module_el8.6.0+2876+9ed4eae2 ALSA-2022:2143, ALSA-2022:1762
AlmaLinux 8 netavark +1 2:1.0.1-27.module_el8.6.0+2878+e681bc44 ALSA-2022:1762
AlmaLinux 8 oci-seccomp-bpf-hook 1.2.0-3.module_el8.6.0+2876+9ed4eae2 ALSA-2022:2143, ALSA-2022:1762
AlmaLinux 8 podman +5 3.0.1-9.module_el8.6.0+2886+bfcd65b6 ALSA-2022:2143, ALSA-2022:1762
AlmaLinux 8 podman-gvproxy 2:4.0.2-6.module_el8.6.0+2878+e681bc44 ALSA-2022:1762
AlmaLinux 8 python3-podman 4.0.0-1.module_el8.6.0+2877+8e437bf5 ALSA-2022:1762
AlmaLinux 8 runc 1.0.0-73.rc95.module_el8.6.0+2876+9ed4eae2 ALSA-2022:2143, ALSA-2022:1762
AlmaLinux 8 skopeo +2 1:1.2.4-1.module_el8.6.0+2876+9ed4eae2 ALSA-2022:2143, ALSA-2022:1762
AlmaLinux 8 slirp4netns 1.1.8-1.module_el8.6.0+2876+9ed4eae2 ALSA-2022:2143, ALSA-2022:1762
AlmaLinux 8 toolbox +1 0.0.99.3-0.4.module_el8.6.0+2877+8e437bf5 ALSA-2022:2143, ALSA-2022:1762
AlmaLinux 8 udica 0.2.4-1.module_el8.6.0+2876+9ed4eae2 ALSA-2022:2143, ALSA-2022:1762

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 8 buildah 1.19.9-3.module+el8.6.0+783+10209741 RLSA-2022:2143, RLSA-2022:1762
Rocky Linux 8 cockpit-podman 29-2.module+el8.4.0+556+40122d08 RLSA-2022:2143, RLSA-2022:1762
Rocky Linux 8 conmon 2:2.0.26-1.module+el8.4.0+558+7340b765 RLSA-2022:2143, RLSA-2022:1762
Rocky Linux 8 container-selinux 2:2.178.0-2.module+el8.6.0+783+10209741 RLSA-2022:2143, RLSA-2022:1762
Rocky Linux 8 containernetworking-plugins 0.9.1-1.module+el8.4.0+556+40122d08 RLSA-2022:2143, RLSA-2022:1762
Rocky Linux 8 containers-common 2:1-27.module+el8.6.0+785+d1251653 RLSA-2022:1762
Rocky Linux 8 criu 3.15-1.module+el8.4.0+556+40122d08 RLSA-2022:2143, RLSA-2022:1762
Rocky Linux 8 crun 0.18-3.module+el8.6.0+783+10209741 RLSA-2022:2143, RLSA-2022:1762
Rocky Linux 8 fuse-overlayfs 1.4.0-2.module+el8.4.0+558+7340b765 RLSA-2022:2143, RLSA-2022:1762
Rocky Linux 8 libslirp 4.3.1-1.module+el8.4.0+556+40122d08 RLSA-2022:2143, RLSA-2022:1762
Rocky Linux 8 oci-seccomp-bpf-hook 1.2.0-3.module+el8.5.0+709+440d5e7e RLSA-2022:2143, RLSA-2022:1762
Rocky Linux 8 podman 3.0.1-9.module+el8.6.0+973+7a06b91e RLSA-2022:2143, RLSA-2022:1762
Rocky Linux 8 python-podman 4.0.0-1.module+el8.6.0+784+32aef5de RLSA-2022:1762
Rocky Linux 8 runc 1.0.0-73.rc95.module+el8.5.0+769+55ca48e8 RLSA-2022:2143, RLSA-2022:1762
Rocky Linux 8 skopeo 1:1.2.4-1.module+el8.5.0+734+8397cf81 RLSA-2022:2143, RLSA-2022:1762
Rocky Linux 8 slirp4netns 1.1.8-1.module+el8.4.0+537+38cf4e42 RLSA-2022:2143, RLSA-2022:1762
Rocky Linux 8 toolbox 0.0.99.3-0.4.module+el8.5.0+710+4c471e88 RLSA-2022:2143, RLSA-2022:1762
Rocky Linux 8 udica 0.2.4-1.module+el8.4.0+556+40122d08 RLSA-2022:2143, RLSA-2022:1762
ReleasePackageFixed inAdvisory
SLES 15 SP4 podman 3.4.7-150400.4.3.1 SUSE-SU-2022:2834-1
SLES 15 SP3 podman 3.4.7-150300.9.9.2 SUSE-SU-2022:2839-1
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLE Micro 5.2 podman 3.4.7-150300.9.9.2 SUSE-SU-2022:2839-1
SLE Micro 5.1 podman 3.4.7-150300.9.9.2 SUSE-SU-2022:2839-1
SUSE Enterprise Storage 7.1 podman 3.4.7-150300.9.9.2 SUSE-SU-2022:2839-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed podman 4.2.1-2.1 openSUSE-SU-2024:12400-1
openSUSE Leap 15.4 podman 3.4.7-150400.4.3.1 SUSE-SU-2022:2834-1
openSUSE Leap 15.3 podman 3.4.7-150300.9.9.2 SUSE-SU-2022:2839-1
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
openSUSE Leap Micro 5.2 podman 3.4.7-150300.9.9.2 SUSE-SU-2022:2839-2
ReleasePackageFixed inAdvisory
Alpine v3.15 podman 3.4.7-r0 —

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 2 (CBL-Mariner) podman 4.1.1-1 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 8 buildah +1 1.19.9-3.module+el8.6.0+20668+bfa6216f ELSA-2022-2143, ELSA-2022-1762
Oracle Linux 8 cockpit-podman 29-2.module+el8.6.0+20668+bfa6216f ELSA-2022-2143, ELSA-2022-1762
Oracle Linux 8 conmon 2:2.0.26-1.module+el8.6.0+20668+bfa6216f ELSA-2022-2143, ELSA-2022-1762
Oracle Linux 8 container-selinux 2:2.178.0-2.module+el8.6.0+20668+bfa6216f ELSA-2022-2143, ELSA-2022-1762
Oracle Linux 8 containernetworking-plugins 0.9.1-1.module+el8.6.0+20668+bfa6216f ELSA-2022-2143, ELSA-2022-1762
Oracle Linux 8 crit +2 3.15-1.module+el8.6.0+20668+bfa6216f ELSA-2022-2143, ELSA-2022-1762
Oracle Linux 8 criu-libs +1 3.15-3.module+el8.6.0+20656+53f7e955 ELSA-2022-1762
Oracle Linux 8 crun 0.18-3.module+el8.6.0+20668+bfa6216f ELSA-2022-2143, ELSA-2022-1762
Oracle Linux 8 fuse-overlayfs 1.4.0-2.module+el8.6.0+20668+bfa6216f ELSA-2022-2143, ELSA-2022-1762
Oracle Linux 8 libslirp +1 4.3.1-1.module+el8.6.0+20668+bfa6216f ELSA-2022-2143, ELSA-2022-1762
Oracle Linux 8 netavark +1 2:1.0.1-27.module+el8.6.0+20656+53f7e955 ELSA-2022-1762
Oracle Linux 8 oci-seccomp-bpf-hook 1.2.0-3.module+el8.6.0+20668+bfa6216f ELSA-2022-2143, ELSA-2022-1762
Oracle Linux 8 podman +5 3.0.1-9.module+el8.6.0+20668+bfa6216f ELSA-2022-2143, ELSA-2022-1762
Oracle Linux 8 podman-gvproxy 2:4.0.2-6.module+el8.6.0+20656+53f7e955 ELSA-2022-1762
Oracle Linux 8 python3-podman 4.0.0-1.module+el8.6.0+20656+53f7e955 ELSA-2022-1762
Oracle Linux 8 runc 1.0.0-73.rc95.module+el8.6.0+20668+bfa6216f ELSA-2022-2143, ELSA-2022-1762
Oracle Linux 8 skopeo +2 1:1.2.4-1.0.1.module+el8.6.0+20668+bfa6216f ELSA-2022-2143, ELSA-2022-1762
Oracle Linux 8 slirp4netns 1.1.8-1.module+el8.6.0+20668+bfa6216f ELSA-2022-2143, ELSA-2022-1762
Oracle Linux 8 udica 0.2.4-1.module+el8.6.0+20668+bfa6216f ELSA-2022-2143, ELSA-2022-1762

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/containers/podman/v3 < 3.4 3.4 GHSA-66vw-v2x9-hw75
Go github.com/containers/psgo < 1.7.2 1.7.2 GHSA-66vw-v2x9-hw75

Advisories 17

References