CVE-2023-0778
EUVD-2023-108727.03.2023, 21:15
A Time-of-check Time-of-use (TOCTOU) flaw was found in podman. This issue may allow a malicious user to replace a normal file in a volume with a symlink while exporting the volume, allowing for access to arbitrary files on the host file system.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| podman_project | podman | - |
| redhat | enterprise_linux | 8.0 |
| redhat | enterprise_linux | 9.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases