CVE-2022-2989
An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data m...
Original description
The description as published by the source.
An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2022-2989 libpod Fixed in: 3.0.1+dfsg1-3+deb11u5
References
- advisory github.com
- advisory nvd.nist.gov
- report bugzilla.redhat.com
- web benthamsgaze.org