CVE-2021-20199

Name of the Vulnerable Software and Affected Versions: Podman versions 1.8.0 through 3.0.0

Description: The issue impacts containerized applications that trust localhost connections by default and do not require authentication. Rootless containers run with Podman receive all traffic with a source IP address of 127.0.0.1, including from remote hosts.

Recommendations: For Podman versions 1.8.0 through 3.0.0, consider restricting access to containerized applications that trust localhost connections by default and do not require authentication, until a patch is available. As a temporary workaround, restrict the use of localhost connections in affected containerized applications to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.