CVE-2023-0778 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2023-0778 Interim 1 17 2023-09-14T23:24:07Z current 2023-02-17T00:17:02Z 2023-09-14T23:24:07Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2023-0778 A Time-of-check Time-of-use (TOCTOU) flaw was found in podman. This issue may allow a malicious user to replace a normal file in a volume with a symlink while exporting the volume, allowing for access to arbitrary files on the host file system. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2023-September/016146.html E-Mail link for SUSE-CU-2023:2960-1 https://lists.suse.com/pipermail/sle-security-updates/2023-September/016147.html E-Mail link for SUSE-CU-2023:2962-1 https://lists.suse.com/pipermail/sle-security-updates/2023-April/014441.html E-Mail link for SUSE-SU-2023:1812-1 https://lists.suse.com/pipermail/sle-security-updates/2023-May/014735.html E-Mail link for SUSE-SU-2023:1814-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings Container rancher/elemental-teal-rt/5.4:1.2.2-1.21 Container rancher/elemental-teal/5.4:1.2.2-2.6 SUSE CaaS Platform 4.0 SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Server 15 SP4-TERADATA SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP4 openSUSE Leap 15.4 openSUSE Leap Micro 5.2 openSUSE Leap Micro 5.3 openSUSE Tumbleweed podman podman-4.4.2-1.1 podman-4.4.4-150300.9.20.1 podman-4.4.4-150400.4.16.1 podman-4.4.4-150500.1.4 podman-cni-config podman-cni-config-4.4.2-1.1 podman-cni-config-4.4.4-150300.9.20.1 podman-cni-config-4.4.4-150400.4.16.1 podman-cni-config-4.4.4-150500.1.4 podman-docker podman-docker-4.4.2-1.1 podman-docker-4.4.4-150400.4.16.1 podman-docker-4.4.4-150500.1.4 podman-remote podman-remote-4.4.2-1.1 podman-remote-4.4.4-150400.4.16.1 podman-remote-4.4.4-150500.1.4 podman-4.4.4-150400.4.16.1 as a component of Container rancher/elemental-teal-rt/5.4:1.2.2-1.21 podman-4.4.4-150400.4.16.1 as a component of Container rancher/elemental-teal/5.4:1.2.2-2.6 podman-4.4.4-150300.9.20.1 as a component of SUSE Enterprise Storage 7.1 podman-cni-config-4.4.4-150300.9.20.1 as a component of SUSE Enterprise Storage 7.1 podman-4.4.4-150300.9.20.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS podman-cni-config-4.4.4-150300.9.20.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS podman-4.4.4-150300.9.20.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS podman-cni-config-4.4.4-150300.9.20.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS podman-4.4.4-150300.9.20.1 as a component of SUSE Linux Enterprise Micro 5.1 podman-cni-config-4.4.4-150300.9.20.1 as a component of SUSE Linux Enterprise Micro 5.1 podman-4.4.4-150300.9.20.1 as a component of SUSE Linux Enterprise Micro 5.2 podman-cni-config-4.4.4-150300.9.20.1 as a component of SUSE Linux Enterprise Micro 5.2 podman-4.4.4-150400.4.16.1 as a component of SUSE Linux Enterprise Micro 5.3 podman-cni-config-4.4.4-150400.4.16.1 as a component of SUSE Linux Enterprise Micro 5.3 podman-4.4.4-150400.4.16.1 as a component of SUSE Linux Enterprise Micro 5.4 podman-cni-config-4.4.4-150400.4.16.1 as a component of SUSE Linux Enterprise Micro 5.4 podman-4.4.4-150400.4.16.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP4 podman-cni-config-4.4.4-150400.4.16.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP4 podman-docker-4.4.4-150400.4.16.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP4 podman-remote-4.4.4-150400.4.16.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP4 podman-4.4.4-150500.1.4 as a component of SUSE Linux Enterprise Module for Containers 15 SP5 podman-cni-config-4.4.4-150500.1.4 as a component of SUSE Linux Enterprise Module for Containers 15 SP5 podman-docker-4.4.4-150500.1.4 as a component of SUSE Linux Enterprise Module for Containers 15 SP5 podman-remote-4.4.4-150500.1.4 as a component of SUSE Linux Enterprise Module for Containers 15 SP5 podman-4.4.4-150300.9.20.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS podman-cni-config-4.4.4-150300.9.20.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS podman-4.4.4-150400.4.16.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA podman-cni-config-4.4.4-150400.4.16.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA podman-docker-4.4.4-150400.4.16.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA podman-remote-4.4.4-150400.4.16.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA podman-4.4.4-150300.9.20.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 podman-cni-config-4.4.4-150300.9.20.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 podman-4.4.4-150400.4.16.1 as a component of openSUSE Leap 15.4 podman-cni-config-4.4.4-150400.4.16.1 as a component of openSUSE Leap 15.4 podman-docker-4.4.4-150400.4.16.1 as a component of openSUSE Leap 15.4 podman-remote-4.4.4-150400.4.16.1 as a component of openSUSE Leap 15.4 podman-4.4.4-150300.9.20.1 as a component of openSUSE Leap Micro 5.2 podman-cni-config-4.4.4-150300.9.20.1 as a component of openSUSE Leap Micro 5.2 podman-4.4.4-150400.4.16.1 as a component of openSUSE Leap Micro 5.3 podman-cni-config-4.4.4-150400.4.16.1 as a component of openSUSE Leap Micro 5.3 podman-4.4.2-1.1 as a component of openSUSE Tumbleweed podman-cni-config-4.4.2-1.1 as a component of openSUSE Tumbleweed podman-docker-4.4.2-1.1 as a component of openSUSE Tumbleweed podman-remote-4.4.2-1.1 as a component of openSUSE Tumbleweed podman as a component of SUSE CaaS Platform 4.0 podman-cni-config as a component of SUSE CaaS Platform 4.0 podman as a component of SUSE Enterprise Storage 7 podman as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS podman-cni-config as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS podman as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS podman-cni-config as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS podman as a component of SUSE Linux Enterprise Module for Containers 15 SP5 podman-cni-config as a component of SUSE Linux Enterprise Module for Containers 15 SP5 podman-docker as a component of SUSE Linux Enterprise Module for Containers 15 SP5 podman-remote as a component of SUSE Linux Enterprise Module for Containers 15 SP5 podman as a component of SUSE Linux Enterprise Server 15 SP1-LTSS podman-cni-config as a component of SUSE Linux Enterprise Server 15 SP1-LTSS podman as a component of SUSE Linux Enterprise Server 15 SP2-LTSS podman-cni-config as a component of SUSE Linux Enterprise Server 15 SP2-LTSS podman as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 podman-cni-config as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 podman as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 podman-cni-config as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 A Time-of-check Time-of-use (TOCTOU) flaw was found in podman. This issue may allow a malicious user to replace a normal file in a volume with a symlink while exporting the volume, allowing for access to arbitrary files on the host file system. CVE-2023-0778 Container rancher/elemental-teal-rt/5.4:1.2.2-1.21:podman-4.4.4-150400.4.16.1 Container rancher/elemental-teal/5.4:1.2.2-2.6:podman-4.4.4-150400.4.16.1 SUSE Enterprise Storage 7.1:podman-4.4.4-150300.9.20.1 SUSE Enterprise Storage 7.1:podman-cni-config-4.4.4-150300.9.20.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-4.4.4-150300.9.20.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:podman-cni-config-4.4.4-150300.9.20.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-4.4.4-150300.9.20.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:podman-cni-config-4.4.4-150300.9.20.1 SUSE Linux Enterprise Micro 5.1:podman-4.4.4-150300.9.20.1 SUSE Linux Enterprise Micro 5.1:podman-cni-config-4.4.4-150300.9.20.1 SUSE Linux Enterprise Micro 5.2:podman-4.4.4-150300.9.20.1 SUSE Linux Enterprise Micro 5.2:podman-cni-config-4.4.4-150300.9.20.1 SUSE Linux Enterprise Micro 5.3:podman-4.4.4-150400.4.16.1 SUSE Linux Enterprise Micro 5.3:podman-cni-config-4.4.4-150400.4.16.1 SUSE Linux Enterprise Micro 5.4:podman-4.4.4-150400.4.16.1 SUSE Linux Enterprise Micro 5.4:podman-cni-config-4.4.4-150400.4.16.1 SUSE Linux Enterprise Module for Containers 15 SP4:podman-4.4.4-150400.4.16.1 SUSE Linux Enterprise Module for Containers 15 SP4:podman-cni-config-4.4.4-150400.4.16.1 SUSE Linux Enterprise Module for Containers 15 SP4:podman-docker-4.4.4-150400.4.16.1 SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-4.4.4-150400.4.16.1 SUSE Linux Enterprise Module for Containers 15 SP5:podman-4.4.4-150500.1.4 SUSE Linux Enterprise Module for Containers 15 SP5:podman-cni-config-4.4.4-150500.1.4 SUSE Linux Enterprise Module for Containers 15 SP5:podman-docker-4.4.4-150500.1.4 SUSE Linux Enterprise Module for Containers 15 SP5:podman-remote-4.4.4-150500.1.4 SUSE Linux Enterprise Server 15 SP3-LTSS:podman-4.4.4-150300.9.20.1 SUSE Linux Enterprise Server 15 SP3-LTSS:podman-cni-config-4.4.4-150300.9.20.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:podman-4.4.4-150400.4.16.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:podman-cni-config-4.4.4-150400.4.16.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:podman-docker-4.4.4-150400.4.16.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:podman-remote-4.4.4-150400.4.16.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-4.4.4-150300.9.20.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:podman-cni-config-4.4.4-150300.9.20.1 openSUSE Leap 15.4:podman-4.4.4-150400.4.16.1 openSUSE Leap 15.4:podman-cni-config-4.4.4-150400.4.16.1 openSUSE Leap 15.4:podman-docker-4.4.4-150400.4.16.1 openSUSE Leap 15.4:podman-remote-4.4.4-150400.4.16.1 openSUSE Leap Micro 5.2:podman-4.4.4-150300.9.20.1 openSUSE Leap Micro 5.2:podman-cni-config-4.4.4-150300.9.20.1 openSUSE Leap Micro 5.3:podman-4.4.4-150400.4.16.1 openSUSE Leap Micro 5.3:podman-cni-config-4.4.4-150400.4.16.1 openSUSE Tumbleweed:podman-4.4.2-1.1 openSUSE Tumbleweed:podman-cni-config-4.4.2-1.1 openSUSE Tumbleweed:podman-docker-4.4.2-1.1 openSUSE Tumbleweed:podman-remote-4.4.2-1.1 SUSE CaaS Platform 4.0:podman SUSE CaaS Platform 4.0:podman-cni-config SUSE Enterprise Storage 7:podman SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:podman SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:podman-cni-config SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:podman SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:podman-cni-config SUSE Linux Enterprise Module for Containers 15 SP5:podman SUSE Linux Enterprise Module for Containers 15 SP5:podman-cni-config SUSE Linux Enterprise Module for Containers 15 SP5:podman-docker SUSE Linux Enterprise Module for Containers 15 SP5:podman-remote SUSE Linux Enterprise Server 15 SP1-LTSS:podman SUSE Linux Enterprise Server 15 SP1-LTSS:podman-cni-config SUSE Linux Enterprise Server 15 SP2-LTSS:podman SUSE Linux Enterprise Server 15 SP2-LTSS:podman-cni-config SUSE Linux Enterprise Server for SAP Applications 15 SP1:podman SUSE Linux Enterprise Server for SAP Applications 15 SP1:podman-cni-config SUSE Linux Enterprise Server for SAP Applications 15 SP2:podman SUSE Linux Enterprise Server for SAP Applications 15 SP2:podman-cni-config moderate 6 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N