CVE-2019-10214 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2019-10214 Interim 1 64 2023-09-14T00:07:25Z current 2021-05-30T14:26:48Z 2023-09-14T00:07:25Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2019-10214 The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift Container Platform, does not enforce TLS connections to the container registry authorization service. An attacker could use this vulnerability to launch a MiTM attack and steal login credentials or bearer tokens. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2019-September/005899.html E-Mail link for SUSE-SU-2019:2340-1 https://lists.suse.com/pipermail/sle-security-updates/2019-September/005898.html E-Mail link for SUSE-SU-2019:2341-1 https://lists.suse.com/pipermail/sle-security-updates/2019-September/005901.html E-Mail link for SUSE-SU-2019:2346-1 https://www.suse.com/support/update/announcement/2019/suse-su-20192368-1.html E-Mail link for SUSE-SU-2019:2368-1 https://www.suse.com/support/update/announcement/2019/suse-su-20192369-1.html E-Mail link for SUSE-SU-2019:2369-1 https://lists.suse.com/pipermail/sle-security-updates/2020-March/006624.html E-Mail link for SUSE-SU-2020:0712-1 https://lists.suse.com/pipermail/sle-security-updates/2020-November/007820.html E-Mail link for SUSE-SU-2020:3423-1 https://lists.suse.com/pipermail/sle-security-updates/2022-March/010404.html E-Mail link for SUSE-SU-2022:0770-1 https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00042.html E-Mail link for openSUSE-SU-2019:2137-1 https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00043.html E-Mail link for openSUSE-SU-2019:2138-1 https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00046.html E-Mail link for openSUSE-SU-2019:2143-1 https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00061.html E-Mail link for openSUSE-SU-2019:2159-1 https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00035.html E-Mail link for openSUSE-SU-2020:0377-1 https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html E-Mail link for openSUSE-SU-2020:0554-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Q7YYGMTZ4T4RLHDVCMQD3K6CDIAXO3O3/ E-Mail link for openSUSE-SU-2020:2106-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/P4DQSPUPKAZCPS5MQYTAYGS7YM76UIHZ/ E-Mail link for openSUSE-SU-2021:0310-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WFIDXN6UAK2I4PPVFPBE4STNQH2FZQ4A/ E-Mail link for openSUSE-SU-2022:0770-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings Container suse/sles/15.3/cdi-importer:1.37.1.8.5.1 Container suse/sles/15.4/cdi-importer:1.43.0.16.7 Container suse/sles/15.5/cdi-importer:1.55.0.17.295 SUSE CaaS Platform 3.0 SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Containers 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Enterprise Storage 7 SUSE Linux Enterprise Module for Containers 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Containers 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Containers 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Module for Containers 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Containers 15 SP3 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Real Time 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Containers 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Module for Containers 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Containers 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server Business Critical Linux 15 SP2 SUSE Linux Enterprise Server Business Critical Linux 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Containers 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Module for Containers 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Containers 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Containers 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Containers 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Manager Proxy 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Containers 15 SP3 SUSE Manager Proxy 4.2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Containers 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Containers 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Manager Retail Branch Server 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Containers 15 SP3 SUSE Manager Retail Branch Server 4.2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Containers 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Containers 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Manager Server 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Containers 15 SP3 SUSE Manager Server 4.2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP4 openSUSE Leap 15.0 openSUSE Leap 15.1 openSUSE Leap 15.2 openSUSE Leap 15.3 openSUSE Tumbleweed buildah buildah-1.17.0-3.6.1 buildah-1.17.0-lp151.2.6.1 buildah-1.19.2-lp152.2.3.1 buildah-1.23.0-1.1 buildah-1.23.1-150300.8.3.1 buildah-1.23.1-150400.1.17 buildah-1.29.1-150500.1.13 buildah-1.7.1-3.3.1 conmon cri-o-1.11.14-4.14.1 cri-o-1.15.0-3.3.2 cri-o-1.17.1-lp151.2.2 cri-o-1.22.0-1.2 cri-o-kubeadm-criconfig-1.15.0-3.3.2 cri-o-kubeadm-criconfig-1.17.1-lp151.2.2 cri-o-kubeadm-criconfig-1.22.0-1.2 cri-tools-1.18.0-lp151.2.1 go1.14-1.14-lp151.6.1 go1.14-doc-1.14-lp151.6.1 go1.14-race-1.14-lp151.6.1 kubernetes-apiserver-1.18.0-lp151.5.1 kubernetes-client-1.18.0-lp151.5.1 kubernetes-controller-manager-1.18.0-lp151.5.1 kubernetes-kubeadm-1.18.0-lp151.5.1 kubernetes-kubelet-common-1.18.0-lp151.5.1 kubernetes-kubelet1.17-1.18.0-lp151.5.1 kubernetes-kubelet1.18-1.18.0-lp151.5.1 kubernetes-master-1.18.0-lp151.5.1 kubernetes-node-1.18.0-lp151.5.1 kubernetes-proxy-1.18.0-lp151.5.1 kubernetes-scheduler-1.18.0-lp151.5.1 libcontainers-common libcontainers-common-20210112-lp152.2.6.1 libcontainers-sles-mounts podman podman-1.4.4-4.11.1 podman-1.4.4-lp151.3.6.1 podman-2.1.1-4.28.1 podman-2.2.1-lp152.4.9.1 podman-3.3.1-2.1 podman-3.4.4-150300.9.3.2 podman-3.4.4-150400.2.14 podman-3.4.7-150400.4.3.1 podman-4.3.1-150400.4.11.1 podman-4.4.4-150500.1.4 podman-cni-config podman-cni-config-1.4.4-4.11.1 podman-cni-config-1.4.4-lp151.3.6.1 podman-cni-config-2.1.1-4.28.1 podman-cni-config-2.2.1-lp152.4.9.1 podman-cni-config-3.3.1-2.1 podman-cni-config-3.4.4-150300.9.3.2 podman-cni-config-3.4.4-150400.2.14 podman-cni-config-3.4.7-150400.4.3.1 podman-cni-config-4.3.1-150400.4.11.1 podman-cni-config-4.4.4-150500.1.4 podman-docker-3.3.1-2.1 podman-docker-3.4.4-150400.2.14 podman-docker-4.4.4-150500.1.4 podman-remote-3.3.1-2.1 podman-remote-3.4.4-150400.2.14 podman-remote-4.4.4-150500.1.4 skopeo skopeo-0.1.32-4.8.1 skopeo-0.1.32-lp150.8.1 skopeo-0.1.41-4.11.1 skopeo-0.1.41-lp151.2.6.1 skopeo-1.2.3-1.2 skopeo-bash-completion-1.2.3-1.2 skopeo-0.1.41-4.11.1 as a component of Container suse/sles/15.3/cdi-importer:1.37.1.8.5.1 skopeo-0.1.41-4.11.1 as a component of Container suse/sles/15.4/cdi-importer:1.43.0.16.7 skopeo-0.1.41-4.11.1 as a component of Container suse/sles/15.5/cdi-importer:1.55.0.17.295 cri-o-1.11.14-4.14.1 as a component of SUSE CaaS Platform 3.0 cri-o-1.15.0-3.3.2 as a component of SUSE CaaS Platform 4.0 cri-o-kubeadm-criconfig-1.15.0-3.3.2 as a component of SUSE CaaS Platform 4.0 podman-2.1.1-4.28.1 as a component of SUSE Linux Enterprise Micro 5.0 podman-cni-config-2.1.1-4.28.1 as a component of SUSE Linux Enterprise Micro 5.0 podman-2.1.1-4.28.1 as a component of SUSE Linux Enterprise Micro 5.1 podman-cni-config-2.1.1-4.28.1 as a component of SUSE Linux Enterprise Micro 5.1 podman-3.4.4-150300.9.3.2 as a component of SUSE Linux Enterprise Micro 5.2 podman-cni-config-3.4.4-150300.9.3.2 as a component of SUSE Linux Enterprise Micro 5.2 podman-3.4.7-150400.4.3.1 as a component of SUSE Linux Enterprise Micro 5.3 podman-cni-config-3.4.7-150400.4.3.1 as a component of SUSE Linux Enterprise Micro 5.3 podman-4.3.1-150400.4.11.1 as a component of SUSE Linux Enterprise Micro 5.4 podman-cni-config-4.3.1-150400.4.11.1 as a component of SUSE Linux Enterprise Micro 5.4 skopeo-0.1.41-4.11.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 skopeo-0.1.41-4.11.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 skopeo-0.1.41-4.11.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 buildah-1.17.0-3.6.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP1 podman-1.4.4-4.11.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP1 podman-cni-config-1.4.4-4.11.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP1 buildah-1.7.1-3.3.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP2 podman-1.4.4-4.11.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP2 podman-cni-config-1.4.4-4.11.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP2 buildah-1.7.1-3.3.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP3 podman-1.4.4-4.11.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP3 podman-cni-config-1.4.4-4.11.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP3 buildah-1.23.1-150400.1.17 as a component of SUSE Linux Enterprise Module for Containers 15 SP4 podman-3.4.4-150400.2.14 as a component of SUSE Linux Enterprise Module for Containers 15 SP4 podman-cni-config-3.4.4-150400.2.14 as a component of SUSE Linux Enterprise Module for Containers 15 SP4 podman-docker-3.4.4-150400.2.14 as a component of SUSE Linux Enterprise Module for Containers 15 SP4 podman-remote-3.4.4-150400.2.14 as a component of SUSE Linux Enterprise Module for Containers 15 SP4 buildah-1.29.1-150500.1.13 as a component of SUSE Linux Enterprise Module for Containers 15 SP5 podman-4.4.4-150500.1.4 as a component of SUSE Linux Enterprise Module for Containers 15 SP5 podman-cni-config-4.4.4-150500.1.4 as a component of SUSE Linux Enterprise Module for Containers 15 SP5 podman-docker-4.4.4-150500.1.4 as a component of SUSE Linux Enterprise Module for Containers 15 SP5 podman-remote-4.4.4-150500.1.4 as a component of SUSE Linux Enterprise Module for Containers 15 SP5 skopeo-0.1.32-4.8.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 skopeo-0.1.41-4.11.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 skopeo-0.1.41-4.11.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 skopeo-0.1.32-lp150.8.1 as a component of openSUSE Leap 15.0 buildah-1.17.0-lp151.2.6.1 as a component of openSUSE Leap 15.1 cri-o-1.17.1-lp151.2.2 as a component of openSUSE Leap 15.1 cri-o-kubeadm-criconfig-1.17.1-lp151.2.2 as a component of openSUSE Leap 15.1 cri-tools-1.18.0-lp151.2.1 as a component of openSUSE Leap 15.1 go1.14-1.14-lp151.6.1 as a component of openSUSE Leap 15.1 go1.14-doc-1.14-lp151.6.1 as a component of openSUSE Leap 15.1 go1.14-race-1.14-lp151.6.1 as a component of openSUSE Leap 15.1 kubernetes-apiserver-1.18.0-lp151.5.1 as a component of openSUSE Leap 15.1 kubernetes-client-1.18.0-lp151.5.1 as a component of openSUSE Leap 15.1 kubernetes-controller-manager-1.18.0-lp151.5.1 as a component of openSUSE Leap 15.1 kubernetes-kubeadm-1.18.0-lp151.5.1 as a component of openSUSE Leap 15.1 kubernetes-kubelet-common-1.18.0-lp151.5.1 as a component of openSUSE Leap 15.1 kubernetes-kubelet1.17-1.18.0-lp151.5.1 as a component of openSUSE Leap 15.1 kubernetes-kubelet1.18-1.18.0-lp151.5.1 as a component of openSUSE Leap 15.1 kubernetes-master-1.18.0-lp151.5.1 as a component of openSUSE Leap 15.1 kubernetes-node-1.18.0-lp151.5.1 as a component of openSUSE Leap 15.1 kubernetes-proxy-1.18.0-lp151.5.1 as a component of openSUSE Leap 15.1 kubernetes-scheduler-1.18.0-lp151.5.1 as a component of openSUSE Leap 15.1 podman-1.4.4-lp151.3.6.1 as a component of openSUSE Leap 15.1 podman-cni-config-1.4.4-lp151.3.6.1 as a component of openSUSE Leap 15.1 skopeo-0.1.41-lp151.2.6.1 as a component of openSUSE Leap 15.1 buildah-1.19.2-lp152.2.3.1 as a component of openSUSE Leap 15.2 libcontainers-common-20210112-lp152.2.6.1 as a component of openSUSE Leap 15.2 podman-2.2.1-lp152.4.9.1 as a component of openSUSE Leap 15.2 podman-cni-config-2.2.1-lp152.4.9.1 as a component of openSUSE Leap 15.2 buildah-1.23.1-150300.8.3.1 as a component of openSUSE Leap 15.3 buildah-1.23.0-1.1 as a component of openSUSE Tumbleweed cri-o-1.22.0-1.2 as a component of openSUSE Tumbleweed cri-o-kubeadm-criconfig-1.22.0-1.2 as a component of openSUSE Tumbleweed podman-3.3.1-2.1 as a component of openSUSE Tumbleweed podman-cni-config-3.3.1-2.1 as a component of openSUSE Tumbleweed podman-docker-3.3.1-2.1 as a component of openSUSE Tumbleweed podman-remote-3.3.1-2.1 as a component of openSUSE Tumbleweed skopeo-1.2.3-1.2 as a component of openSUSE Tumbleweed skopeo-bash-completion-1.2.3-1.2 as a component of openSUSE Tumbleweed buildah as a component of SUSE CaaS Platform 4.0 skopeo as a component of SUSE CaaS Platform 4.0 buildah as a component of SUSE Enterprise Storage 6 skopeo as a component of SUSE Enterprise Storage 6 buildah as a component of SUSE Enterprise Storage 7 conmon as a component of SUSE Enterprise Storage 7.1 libcontainers-common as a component of SUSE Enterprise Storage 7.1 podman as a component of SUSE Enterprise Storage 7.1 podman-cni-config as a component of SUSE Enterprise Storage 7.1 buildah as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS buildah as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS skopeo as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS buildah as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS buildah as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS conmon as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libcontainers-common as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS podman as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS podman-cni-config as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS conmon as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libcontainers-common as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS podman as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS podman-cni-config as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS conmon as a component of SUSE Linux Enterprise Micro 5.1 libcontainers-common as a component of SUSE Linux Enterprise Micro 5.1 podman as a component of SUSE Linux Enterprise Micro 5.1 podman-cni-config as a component of SUSE Linux Enterprise Micro 5.1 conmon as a component of SUSE Linux Enterprise Micro 5.3 libcontainers-common as a component of SUSE Linux Enterprise Micro 5.3 libcontainers-sles-mounts as a component of SUSE Linux Enterprise Micro 5.3 podman as a component of SUSE Linux Enterprise Micro 5.3 podman-cni-config as a component of SUSE Linux Enterprise Micro 5.3 libcontainers-common as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libcontainers-common as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 conmon as a component of SUSE Linux Enterprise Module for Containers 15 SP3 podman as a component of SUSE Linux Enterprise Module for Containers 15 SP3 podman-cni-config as a component of SUSE Linux Enterprise Module for Containers 15 SP3 libcontainers-common as a component of SUSE Linux Enterprise Module for Server Applications 15 libcontainers-common as a component of SUSE Linux Enterprise Real Time 15 SP3 buildah as a component of SUSE Linux Enterprise Server 15 SP1-LTSS skopeo as a component of SUSE Linux Enterprise Server 15 SP1-LTSS buildah as a component of SUSE Linux Enterprise Server 15 SP2-LTSS buildah as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 buildah as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP2 conmon as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP3 libcontainers-common as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP3 podman as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP3 buildah as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 skopeo as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 buildah as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 conmon as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libcontainers-common as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 podman as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 podman-cni-config as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 buildah as a component of SUSE Manager Proxy 4.1 libcontainers-common as a component of SUSE Manager Proxy 4.2 buildah as a component of SUSE Manager Retail Branch Server 4.1 libcontainers-common as a component of SUSE Manager Retail Branch Server 4.2 buildah as a component of SUSE Manager Server 4.1 libcontainers-common as a component of SUSE Manager Server 4.2 The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift Container Platform, does not enforce TLS connections to the container registry authorization service. An attacker could use this vulnerability to launch a MiTM attack and steal login credentials or bearer tokens. CVE-2019-10214 Container suse/sles/15.3/cdi-importer:1.37.1.8.5.1:skopeo-0.1.41-4.11.1 Container suse/sles/15.4/cdi-importer:1.43.0.16.7:skopeo-0.1.41-4.11.1 Container suse/sles/15.5/cdi-importer:1.55.0.17.295:skopeo-0.1.41-4.11.1 SUSE CaaS Platform 3.0:cri-o-1.11.14-4.14.1 SUSE CaaS Platform 4.0:cri-o-1.15.0-3.3.2 SUSE CaaS Platform 4.0:cri-o-kubeadm-criconfig-1.15.0-3.3.2 SUSE Linux Enterprise Micro 5.0:podman-2.1.1-4.28.1 SUSE Linux Enterprise Micro 5.0:podman-cni-config-2.1.1-4.28.1 SUSE Linux Enterprise Micro 5.1:podman-2.1.1-4.28.1 SUSE Linux Enterprise Micro 5.1:podman-cni-config-2.1.1-4.28.1 SUSE Linux Enterprise Micro 5.2:podman-3.4.4-150300.9.3.2 SUSE Linux Enterprise Micro 5.2:podman-cni-config-3.4.4-150300.9.3.2 SUSE Linux Enterprise Micro 5.3:podman-3.4.7-150400.4.3.1 SUSE Linux Enterprise Micro 5.3:podman-cni-config-3.4.7-150400.4.3.1 SUSE Linux Enterprise Micro 5.4:podman-4.3.1-150400.4.11.1 SUSE Linux Enterprise Micro 5.4:podman-cni-config-4.3.1-150400.4.11.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:skopeo-0.1.41-4.11.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:skopeo-0.1.41-4.11.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:skopeo-0.1.41-4.11.1 SUSE Linux Enterprise Module for Containers 15 SP1:buildah-1.17.0-3.6.1 SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.4.4-4.11.1 SUSE Linux Enterprise Module for Containers 15 SP1:podman-cni-config-1.4.4-4.11.1 SUSE Linux Enterprise Module for Containers 15 SP2:buildah-1.7.1-3.3.1 SUSE Linux Enterprise Module for Containers 15 SP2:podman-1.4.4-4.11.1 SUSE Linux Enterprise Module for Containers 15 SP2:podman-cni-config-1.4.4-4.11.1 SUSE Linux Enterprise Module for Containers 15 SP3:buildah-1.7.1-3.3.1 SUSE Linux Enterprise Module for Containers 15 SP3:podman-1.4.4-4.11.1 SUSE Linux Enterprise Module for Containers 15 SP3:podman-cni-config-1.4.4-4.11.1 SUSE Linux Enterprise Module for Containers 15 SP4:buildah-1.23.1-150400.1.17 SUSE Linux Enterprise Module for Containers 15 SP4:podman-3.4.4-150400.2.14 SUSE Linux Enterprise Module for Containers 15 SP4:podman-cni-config-3.4.4-150400.2.14 SUSE Linux Enterprise Module for Containers 15 SP4:podman-docker-3.4.4-150400.2.14 SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-3.4.4-150400.2.14 SUSE Linux Enterprise Module for Containers 15 SP5:buildah-1.29.1-150500.1.13 SUSE Linux Enterprise Module for Containers 15 SP5:podman-4.4.4-150500.1.4 SUSE Linux Enterprise Module for Containers 15 SP5:podman-cni-config-4.4.4-150500.1.4 SUSE Linux Enterprise Module for Containers 15 SP5:podman-docker-4.4.4-150500.1.4 SUSE Linux Enterprise Module for Containers 15 SP5:podman-remote-4.4.4-150500.1.4 SUSE Linux Enterprise Module for Server Applications 15:skopeo-0.1.32-4.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP1:skopeo-0.1.41-4.11.1 SUSE Linux Enterprise Module for Server Applications 15 SP2:skopeo-0.1.41-4.11.1 openSUSE Leap 15.0:skopeo-0.1.32-lp150.8.1 openSUSE Leap 15.1:buildah-1.17.0-lp151.2.6.1 openSUSE Leap 15.1:cri-o-1.17.1-lp151.2.2 openSUSE Leap 15.1:cri-o-kubeadm-criconfig-1.17.1-lp151.2.2 openSUSE Leap 15.1:cri-tools-1.18.0-lp151.2.1 openSUSE Leap 15.1:go1.14-1.14-lp151.6.1 openSUSE Leap 15.1:go1.14-doc-1.14-lp151.6.1 openSUSE Leap 15.1:go1.14-race-1.14-lp151.6.1 openSUSE Leap 15.1:kubernetes-apiserver-1.18.0-lp151.5.1 openSUSE Leap 15.1:kubernetes-client-1.18.0-lp151.5.1 openSUSE Leap 15.1:kubernetes-controller-manager-1.18.0-lp151.5.1 openSUSE Leap 15.1:kubernetes-kubeadm-1.18.0-lp151.5.1 openSUSE Leap 15.1:kubernetes-kubelet-common-1.18.0-lp151.5.1 openSUSE Leap 15.1:kubernetes-kubelet1.17-1.18.0-lp151.5.1 openSUSE Leap 15.1:kubernetes-kubelet1.18-1.18.0-lp151.5.1 openSUSE Leap 15.1:kubernetes-master-1.18.0-lp151.5.1 openSUSE Leap 15.1:kubernetes-node-1.18.0-lp151.5.1 openSUSE Leap 15.1:kubernetes-proxy-1.18.0-lp151.5.1 openSUSE Leap 15.1:kubernetes-scheduler-1.18.0-lp151.5.1 openSUSE Leap 15.1:podman-1.4.4-lp151.3.6.1 openSUSE Leap 15.1:podman-cni-config-1.4.4-lp151.3.6.1 openSUSE Leap 15.1:skopeo-0.1.41-lp151.2.6.1 openSUSE Leap 15.2:buildah-1.19.2-lp152.2.3.1 openSUSE Leap 15.2:libcontainers-common-20210112-lp152.2.6.1 openSUSE Leap 15.2:podman-2.2.1-lp152.4.9.1 openSUSE Leap 15.2:podman-cni-config-2.2.1-lp152.4.9.1 openSUSE Leap 15.3:buildah-1.23.1-150300.8.3.1 openSUSE Tumbleweed:buildah-1.23.0-1.1 openSUSE Tumbleweed:cri-o-1.22.0-1.2 openSUSE Tumbleweed:cri-o-kubeadm-criconfig-1.22.0-1.2 openSUSE Tumbleweed:podman-3.3.1-2.1 openSUSE Tumbleweed:podman-cni-config-3.3.1-2.1 openSUSE Tumbleweed:podman-docker-3.3.1-2.1 openSUSE Tumbleweed:podman-remote-3.3.1-2.1 openSUSE Tumbleweed:skopeo-1.2.3-1.2 openSUSE Tumbleweed:skopeo-bash-completion-1.2.3-1.2 SUSE CaaS Platform 4.0:buildah SUSE Enterprise Storage 6:buildah SUSE Enterprise Storage 7.1:conmon SUSE Enterprise Storage 7.1:libcontainers-common SUSE Enterprise Storage 7.1:podman SUSE Enterprise Storage 7.1:podman-cni-config SUSE Enterprise Storage 7:buildah SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:buildah SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:buildah SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:buildah SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:buildah SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:conmon SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libcontainers-common SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-cni-config SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:conmon SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libcontainers-common SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-cni-config SUSE Linux Enterprise Micro 5.1:conmon SUSE Linux Enterprise Micro 5.1:libcontainers-common SUSE Linux Enterprise Micro 5.1:podman SUSE Linux Enterprise Micro 5.1:podman-cni-config SUSE Linux Enterprise Micro 5.3:conmon SUSE Linux Enterprise Micro 5.3:libcontainers-common SUSE Linux Enterprise Micro 5.3:libcontainers-sles-mounts SUSE Linux Enterprise Micro 5.3:podman SUSE Linux Enterprise Micro 5.3:podman-cni-config SUSE Linux Enterprise Module for Basesystem 15 SP1:libcontainers-common SUSE Linux Enterprise Module for Basesystem 15 SP3:libcontainers-common SUSE Linux Enterprise Module for Containers 15 SP3:conmon SUSE Linux Enterprise Module for Containers 15 SP3:podman SUSE Linux Enterprise Module for Containers 15 SP3:podman-cni-config SUSE Linux Enterprise Module for Server Applications 15:libcontainers-common SUSE Linux Enterprise Real Time 15 SP3:libcontainers-common SUSE Linux Enterprise Server 15 SP1-LTSS:buildah SUSE Linux Enterprise Server 15 SP2-LTSS:buildah SUSE Linux Enterprise Server Business Critical Linux 15 SP1:buildah SUSE Linux Enterprise Server Business Critical Linux 15 SP2:buildah SUSE Linux Enterprise Server Business Critical Linux 15 SP3:conmon SUSE Linux Enterprise Server Business Critical Linux 15 SP3:libcontainers-common SUSE Linux Enterprise Server Business Critical Linux 15 SP3:podman SUSE Linux Enterprise Server for SAP Applications 15 SP1:buildah SUSE Linux Enterprise Server for SAP Applications 15 SP2:buildah SUSE Linux Enterprise Server for SAP Applications 15 SP3:conmon SUSE Linux Enterprise Server for SAP Applications 15 SP3:libcontainers-common SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-cni-config SUSE Manager Proxy 4.1:buildah SUSE Manager Proxy 4.2:libcontainers-common SUSE Manager Retail Branch Server 4.1:buildah SUSE Manager Retail Branch Server 4.2:libcontainers-common SUSE Manager Server 4.1:buildah SUSE Manager Server 4.2:libcontainers-common SUSE CaaS Platform 4.0:skopeo SUSE Enterprise Storage 6:skopeo SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:skopeo SUSE Linux Enterprise Server 15 SP1-LTSS:skopeo SUSE Linux Enterprise Server for SAP Applications 15 SP1:skopeo important 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N 9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H