PT-2022-18404 · Red Hat · Podman

Mauro Matteo Cascella

·

CVE-2022-2738

·

Published

2022-09-01

·

Updated

2023-02-13

CVSS v3.1

7.5

High

VectorAV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions podman versions prior to the version fixed via RHSA-2020:2117
Description The issue could potentially be used to crash or cause code execution in Go applications using the Go GPGME wrapper library under certain conditions during GPG signature verification.
Recommendations For versions prior to the one fixed via RHSA-2020:2117, update to a version that includes the fix for the issue.

Fix

Use After Free

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2022-2738
RHSA-2022:6119

Affected Products

Podman