CVE-2022-1227 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2022-1227 Interim 1 40 2023-09-14T23:35:53Z current 2022-04-07T02:08:55Z 2023-09-14T23:35:53Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2022-1227 A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem, leading to information disclosure or denial of service. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2022-August/011935.html E-Mail link for SUSE-SU-2022:2834-1 https://lists.suse.com/pipermail/sle-security-updates/2022-August/011941.html E-Mail link for SUSE-SU-2022:2839-1 https://lists.suse.com/pipermail/sle-security-updates/2022-September/012032.html E-Mail link for SUSE-SU-2022:2839-2 https://www.suse.com/support/security/rating/ SUSE Security Ratings Container rancher/elemental-teal-rt/5.4:1.2.2-2.2.1 Container rancher/elemental-teal/5.4:1.2.2-3.2.1 SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Module for Containers 15 SP3 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise Module for Containers 15 SP3 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Module for Containers 15 SP3 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Server 15 SP4-TERADATA SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server Business Critical Linux 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Module for Containers 15 SP3 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Manager Proxy 4.1 SUSE Linux Enterprise Module for Containers 15 SP3 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Manager Retail Branch Server 4.1 SUSE Linux Enterprise Module for Containers 15 SP3 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Manager Server 4.1 SUSE Linux Enterprise Module for Containers 15 SP3 SUSE Linux Enterprise Module for Containers 15 SP4 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.2 openSUSE Tumbleweed podman podman-3.4.7-150300.9.9.2 podman-3.4.7-150400.4.3.1 podman-4.2.1-2.1 podman-4.3.1-150400.4.11.1 podman-4.4.4-150500.1.4 podman-cni-config podman-cni-config-3.4.7-150300.9.9.2 podman-cni-config-3.4.7-150400.4.3.1 podman-cni-config-4.2.1-2.1 podman-cni-config-4.3.1-150400.4.11.1 podman-cni-config-4.4.4-150500.1.4 podman-docker-3.4.7-150400.4.3.1 podman-docker-4.2.1-2.1 podman-docker-4.4.4-150500.1.4 podman-remote-3.4.7-150400.4.3.1 podman-remote-4.2.1-2.1 podman-remote-4.4.4-150500.1.4 podman-3.4.7-150400.4.3.1 as a component of Container rancher/elemental-teal-rt/5.4:1.2.2-2.2.1 podman-3.4.7-150400.4.3.1 as a component of Container rancher/elemental-teal/5.4:1.2.2-3.2.1 podman-3.4.7-150300.9.9.2 as a component of SUSE Enterprise Storage 7.1 podman-3.4.7-150300.9.9.2 as a component of SUSE Linux Enterprise Micro 5.1 podman-cni-config-3.4.7-150300.9.9.2 as a component of SUSE Linux Enterprise Micro 5.1 podman-3.4.7-150300.9.9.2 as a component of SUSE Linux Enterprise Micro 5.2 podman-cni-config-3.4.7-150300.9.9.2 as a component of SUSE Linux Enterprise Micro 5.2 podman-3.4.7-150400.4.3.1 as a component of SUSE Linux Enterprise Micro 5.3 podman-cni-config-3.4.7-150400.4.3.1 as a component of SUSE Linux Enterprise Micro 5.3 podman-4.3.1-150400.4.11.1 as a component of SUSE Linux Enterprise Micro 5.4 podman-cni-config-4.3.1-150400.4.11.1 as a component of SUSE Linux Enterprise Micro 5.4 podman-3.4.7-150300.9.9.2 as a component of SUSE Linux Enterprise Module for Containers 15 SP3 podman-cni-config-3.4.7-150300.9.9.2 as a component of SUSE Linux Enterprise Module for Containers 15 SP3 podman-3.4.7-150400.4.3.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP4 podman-cni-config-3.4.7-150400.4.3.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP4 podman-docker-3.4.7-150400.4.3.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP4 podman-remote-3.4.7-150400.4.3.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP4 podman-4.4.4-150500.1.4 as a component of SUSE Linux Enterprise Module for Containers 15 SP5 podman-cni-config-4.4.4-150500.1.4 as a component of SUSE Linux Enterprise Module for Containers 15 SP5 podman-docker-4.4.4-150500.1.4 as a component of SUSE Linux Enterprise Module for Containers 15 SP5 podman-remote-4.4.4-150500.1.4 as a component of SUSE Linux Enterprise Module for Containers 15 SP5 podman-3.4.7-150400.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA podman-cni-config-3.4.7-150400.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA podman-docker-3.4.7-150400.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA podman-remote-3.4.7-150400.4.3.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA podman-3.4.7-150300.9.9.2 as a component of openSUSE Leap 15.3 podman-cni-config-3.4.7-150300.9.9.2 as a component of openSUSE Leap 15.3 podman-3.4.7-150400.4.3.1 as a component of openSUSE Leap 15.4 podman-cni-config-3.4.7-150400.4.3.1 as a component of openSUSE Leap 15.4 podman-docker-3.4.7-150400.4.3.1 as a component of openSUSE Leap 15.4 podman-remote-3.4.7-150400.4.3.1 as a component of openSUSE Leap 15.4 podman-3.4.7-150300.9.9.2 as a component of openSUSE Leap Micro 5.2 podman-cni-config-3.4.7-150300.9.9.2 as a component of openSUSE Leap Micro 5.2 podman-4.2.1-2.1 as a component of openSUSE Tumbleweed podman-cni-config-4.2.1-2.1 as a component of openSUSE Tumbleweed podman-docker-4.2.1-2.1 as a component of openSUSE Tumbleweed podman-remote-4.2.1-2.1 as a component of openSUSE Tumbleweed podman as a component of SUSE CaaS Platform 4.0 podman-cni-config as a component of SUSE CaaS Platform 4.0 podman as a component of SUSE Enterprise Storage 6 podman as a component of SUSE Enterprise Storage 7 podman as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS podman-cni-config as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS podman as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS podman-cni-config as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS podman as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS podman-cni-config as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS podman as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS podman-cni-config as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS podman as a component of SUSE Linux Enterprise Server 15 SP1-LTSS podman-cni-config as a component of SUSE Linux Enterprise Server 15 SP1-LTSS podman as a component of SUSE Linux Enterprise Server 15 SP2-LTSS podman-cni-config as a component of SUSE Linux Enterprise Server 15 SP2-LTSS podman as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 podman as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP2 podman as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 podman-cni-config as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 podman as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 podman-cni-config as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 podman as a component of SUSE Manager Proxy 4.1 podman as a component of SUSE Manager Retail Branch Server 4.1 podman as a component of SUSE Manager Server 4.1 A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem, leading to information disclosure or denial of service. CVE-2022-1227 Container rancher/elemental-teal-rt/5.4:1.2.2-2.2.1:podman-3.4.7-150400.4.3.1 Container rancher/elemental-teal/5.4:1.2.2-3.2.1:podman-3.4.7-150400.4.3.1 SUSE Enterprise Storage 7.1:podman-3.4.7-150300.9.9.2 SUSE Linux Enterprise Micro 5.1:podman-3.4.7-150300.9.9.2 SUSE Linux Enterprise Micro 5.1:podman-cni-config-3.4.7-150300.9.9.2 SUSE Linux Enterprise Micro 5.2:podman-3.4.7-150300.9.9.2 SUSE Linux Enterprise Micro 5.2:podman-cni-config-3.4.7-150300.9.9.2 SUSE Linux Enterprise Micro 5.3:podman-3.4.7-150400.4.3.1 SUSE Linux Enterprise Micro 5.3:podman-cni-config-3.4.7-150400.4.3.1 SUSE Linux Enterprise Micro 5.4:podman-4.3.1-150400.4.11.1 SUSE Linux Enterprise Micro 5.4:podman-cni-config-4.3.1-150400.4.11.1 SUSE Linux Enterprise Module for Containers 15 SP3:podman-3.4.7-150300.9.9.2 SUSE Linux Enterprise Module for Containers 15 SP3:podman-cni-config-3.4.7-150300.9.9.2 SUSE Linux Enterprise Module for Containers 15 SP4:podman-3.4.7-150400.4.3.1 SUSE Linux Enterprise Module for Containers 15 SP4:podman-cni-config-3.4.7-150400.4.3.1 SUSE Linux Enterprise Module for Containers 15 SP4:podman-docker-3.4.7-150400.4.3.1 SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-3.4.7-150400.4.3.1 SUSE Linux Enterprise Module for Containers 15 SP5:podman-4.4.4-150500.1.4 SUSE Linux Enterprise Module for Containers 15 SP5:podman-cni-config-4.4.4-150500.1.4 SUSE Linux Enterprise Module for Containers 15 SP5:podman-docker-4.4.4-150500.1.4 SUSE Linux Enterprise Module for Containers 15 SP5:podman-remote-4.4.4-150500.1.4 SUSE Linux Enterprise Server 15 SP4-TERADATA:podman-3.4.7-150400.4.3.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:podman-cni-config-3.4.7-150400.4.3.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:podman-docker-3.4.7-150400.4.3.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:podman-remote-3.4.7-150400.4.3.1 openSUSE Leap 15.3:podman-3.4.7-150300.9.9.2 openSUSE Leap 15.3:podman-cni-config-3.4.7-150300.9.9.2 openSUSE Leap 15.4:podman-3.4.7-150400.4.3.1 openSUSE Leap 15.4:podman-cni-config-3.4.7-150400.4.3.1 openSUSE Leap 15.4:podman-docker-3.4.7-150400.4.3.1 openSUSE Leap 15.4:podman-remote-3.4.7-150400.4.3.1 openSUSE Leap Micro 5.2:podman-3.4.7-150300.9.9.2 openSUSE Leap Micro 5.2:podman-cni-config-3.4.7-150300.9.9.2 openSUSE Tumbleweed:podman-4.2.1-2.1 openSUSE Tumbleweed:podman-cni-config-4.2.1-2.1 openSUSE Tumbleweed:podman-docker-4.2.1-2.1 openSUSE Tumbleweed:podman-remote-4.2.1-2.1 SUSE CaaS Platform 4.0:podman SUSE CaaS Platform 4.0:podman-cni-config SUSE Enterprise Storage 6:podman SUSE Enterprise Storage 7:podman SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:podman SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:podman-cni-config SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:podman SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:podman-cni-config SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:podman SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:podman-cni-config SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:podman SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:podman-cni-config SUSE Linux Enterprise Server 15 SP1-LTSS:podman SUSE Linux Enterprise Server 15 SP1-LTSS:podman-cni-config SUSE Linux Enterprise Server 15 SP2-LTSS:podman SUSE Linux Enterprise Server 15 SP2-LTSS:podman-cni-config SUSE Linux Enterprise Server Business Critical Linux 15 SP1:podman SUSE Linux Enterprise Server Business Critical Linux 15 SP2:podman SUSE Linux Enterprise Server for SAP Applications 15 SP1:podman SUSE Linux Enterprise Server for SAP Applications 15 SP1:podman-cni-config SUSE Linux Enterprise Server for SAP Applications 15 SP2:podman SUSE Linux Enterprise Server for SAP Applications 15 SP2:podman-cni-config SUSE Manager Proxy 4.1:podman SUSE Manager Retail Branch Server 4.1:podman SUSE Manager Server 4.1:podman important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H