Patchwire CVEs, their patch status, and feeds to follow them

CVE-2019-25067

Fixed in a distro release EPSS 3%CVSS 6.3

A vulnerability, which was classified as critical, was found in Podman and Varlink 1.5.1. This affects an unknown part of the component API. The manipulation leads to Remote Privilege Escalation. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-143949 was assigned to this vulnerability.

Published 2022-06-09 · CVE record · OSV

Products: podman_project podman, varlink

Distro releases

ReleasePackageFixed in
Debian 12libpod3.0.0+dfsg1-1
Ubuntu Pro 22.04 LTSlibpodno fix
Ubuntu Pro 24.04 LTSlibpodno fix