Cloudanix VulnDB

CVE-2024-9341

Medium · 5.4

CVSS

5.4

EPSS

1.0%

Published

Oct 1, 2024

CISA due date

—

Cloudanix analysis

Monitor only SSVC: Track

A bug in container software can let an attacker who controls a container reach files on the underlying server that should have stayed hidden.

Exploitation
Local Privilege
Attacker needs
Low Privilege
Complexity
Moderate
Impact
Privilege Gain
Component
Library
Class
Container Escape
Remediation
Upgrade
Effort
Medium
Patch risk
Low

What it actually does

In FIPS mode the containers/common Go library performs insufficient path validation allowing symlink traversal that causes container runtimes to bind-mount arbitrary host directories into a container, breaking the intended isolation boundary.

Why it matters to the business

Attackers who can influence container configuration or image contents may obtain read/write access to sensitive host files, enabling full host compromise and potential lateral movement across the cluster.

How an attack unfolds

An attacker supplies a container image or volume containing a crafted symbolic link that points outside the container root. When the runtime processes the path while FIPS mode is active, the flawed validation follows the link and mounts the target host directory inside the container, giving the attacker access to critical host resources.

How to fix it

Upgrade github.com/kubeedge/kubeedge to version 1.9.4 or later. Verify that FIPS-enabled nodes are running the patched release before re-enabling container workloads.

How to confirm the fix worked

Confirm the running KubeEdge version is 1.9.4 or newer on all nodes. Review container runtime configuration to ensure FIPS mode is active only after the upgrade. Test that previously exploitable symlink paths are now rejected.

Typical attack path

  1. Attacker crafts a container image or volume mount containing a symlink that resolves to a sensitive host directory.
  2. The image or manifest is deployed to a KubeEdge node running with FIPS mode enabled.
  3. The containers/common library processes the path without proper validation and follows the symlink.
  4. The host directory is mounted inside the container, allowing the attacker to read or modify host files.
  5. Attacker uses the newly obtained host access to escalate privileges or exfiltrate data.

How to detect it

Search container runtime and kubelet logs for unexpected bind-mount operations that reference host paths outside normal container storage. Monitor for processes inside containers accessing files typically located only on the host (for example /etc/shadow or /proc).

What your security team should do

  • Immediately schedule upgrade of all KubeEdge installations to 1.9.4.
  • Temporarily disable FIPS mode on nodes until the patch is applied if the risk of escape is unacceptable.
  • Audit existing container images and volume mounts for unexpected symlinks that traverse outside the container root.
  • Add runtime policy that rejects mounts containing absolute symlinks until the fix is in place.

The record

A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system into mounting sensitive host directories inside a container. This issue also allows attackers to access critical host files, bypassing the intended isolation between containers and the host system.

Affected packages

Ecosystem Package Introduced Fixed
Go github.com/containers/common 0 0.60.4
AlmaLinux:8 aardvark-dns 0 2:1.10.1-2.module_el8.10.0+3901+4b80ecd7
AlmaLinux:8 aardvark-dns 0 2:1.10.1-2.module_el8.10.0+3909+6e1c1eb7
AlmaLinux:8 buildah 0 2:1.33.10-1.module_el8.10.0+3909+6e1c1eb7
AlmaLinux:8 buildah-tests 0 2:1.33.10-1.module_el8.10.0+3909+6e1c1eb7
AlmaLinux:8 cockpit-podman 0 84.1-1.module_el8.10.0+3876+e55593a8
AlmaLinux:8 conmon 0 3:2.1.10-1.module_el8.10.0+3845+87b84552
AlmaLinux:8 conmon 0 3:2.1.10-1.module_el8.10.0+3876+e55593a8
AlmaLinux:8 conmon 0 3:2.1.10-1.module_el8.10.0+3901+4b80ecd7
AlmaLinux:8 conmon 0 3:2.1.10-1.module_el8.10.0+3909+6e1c1eb7
AlmaLinux:8 container-selinux 0 2:2.229.0-2.module_el8.10.0+3909+6e1c1eb7
AlmaLinux:8 containernetworking-plugins 0 1:1.4.0-5.module_el8.10.0+3876+e55593a8
AlmaLinux:8 containernetworking-plugins 0 1:1.4.0-5.module_el8.10.0+3901+4b80ecd7
AlmaLinux:8 containernetworking-plugins 0 1:1.4.0-5.module_el8.10.0+3909+6e1c1eb7
AlmaLinux:8 containers-common 0 2:1-82.module_el8.10.0+3876+e55593a8
AlmaLinux:8 containers-common 0 2:1-82.module_el8.10.0+3901+4b80ecd7
AlmaLinux:8 crit 0 3.18-5.module_el8.10.0+3845+87b84552
AlmaLinux:8 crit 0 3.18-5.module_el8.10.0+3858+6ad51f9f
AlmaLinux:8 crit 0 3.18-5.module_el8.10.0+3901+4b80ecd7
AlmaLinux:8 criu 0 3.18-5.module_el8.10.0+3845+87b84552
AlmaLinux:8 criu 0 3.18-5.module_el8.10.0+3876+e55593a8
AlmaLinux:8 criu 0 3.18-5.module_el8.10.0+3909+6e1c1eb7
AlmaLinux:8 criu-devel 0 3.18-5.module_el8.10.0+3845+87b84552
AlmaLinux:8 criu-devel 0 3.18-5.module_el8.10.0+3858+6ad51f9f
AlmaLinux:8 criu-devel 0 3.18-5.module_el8.10.0+3876+e55593a8
AlmaLinux:8 criu-libs 0 3.18-5.module_el8.10.0+3845+87b84552
AlmaLinux:8 criu-libs 0 3.18-5.module_el8.10.0+3901+4b80ecd7
AlmaLinux:8 criu-libs 0 3.18-5.module_el8.10.0+3909+6e1c1eb7
AlmaLinux:8 crun 0 1.14.3-2.module_el8.10.0+3845+87b84552
AlmaLinux:8 crun 0 1.14.3-2.module_el8.10.0+3876+e55593a8
AlmaLinux:8 crun 0 1.14.3-2.module_el8.10.0+3909+6e1c1eb7
AlmaLinux:8 fuse-overlayfs 0 1.13-1.module_el8.10.0+3792+03eaed9c
AlmaLinux:8 fuse-overlayfs 0 1.13-1.module_el8.10.0+3901+4b80ecd7
AlmaLinux:8 fuse-overlayfs 0 1.13-1.module_el8.10.0+3909+6e1c1eb7
AlmaLinux:8 libslirp 0 4.4.0-2.module_el8.10.0+3845+87b84552
AlmaLinux:8 libslirp 0 4.4.0-2.module_el8.10.0+3858+6ad51f9f
AlmaLinux:8 libslirp 0 4.4.0-2.module_el8.10.0+3876+e55593a8
AlmaLinux:8 libslirp-devel 0 4.4.0-2.module_el8.10.0+3845+87b84552
AlmaLinux:8 libslirp-devel 0 4.4.0-2.module_el8.10.0+3876+e55593a8
AlmaLinux:8 libslirp-devel 0 4.4.0-2.module_el8.10.0+3901+4b80ecd7
AlmaLinux:8 libslirp-devel 0 4.4.0-2.module_el8.10.0+3909+6e1c1eb7
AlmaLinux:8 netavark 0 2:1.10.3-1.module_el8.10.0+3845+87b84552
AlmaLinux:8 netavark 0 2:1.10.3-1.module_el8.10.0+3858+6ad51f9f
AlmaLinux:8 netavark 0 2:1.10.3-1.module_el8.10.0+3901+4b80ecd7
AlmaLinux:8 oci-seccomp-bpf-hook 0 1.2.10-1.module_el8.10.0+3792+03eaed9c
AlmaLinux:8 oci-seccomp-bpf-hook 0 1.2.10-1.module_el8.10.0+3876+e55593a8
AlmaLinux:8 oci-seccomp-bpf-hook 0 1.2.10-1.module_el8.10.0+3909+6e1c1eb7
AlmaLinux:8 podman 0 4:4.9.4-15.module_el8.10.0+3909+6e1c1eb7
AlmaLinux:8 podman-catatonit 0 4:4.9.4-15.module_el8.10.0+3909+6e1c1eb7
AlmaLinux:8 podman-docker 0 4:4.9.4-15.module_el8.10.0+3909+6e1c1eb7
AlmaLinux:8 podman-gvproxy 0 4:4.9.4-15.module_el8.10.0+3909+6e1c1eb7
AlmaLinux:8 podman-plugins 0 4:4.9.4-15.module_el8.10.0+3909+6e1c1eb7
AlmaLinux:8 podman-remote 0 4:4.9.4-15.module_el8.10.0+3909+6e1c1eb7
AlmaLinux:8 podman-tests 0 4:4.9.4-15.module_el8.10.0+3909+6e1c1eb7
AlmaLinux:8 python3-criu 0 3.18-5.module_el8.10.0+3858+6ad51f9f
AlmaLinux:8 python3-criu 0 3.18-5.module_el8.10.0+3876+e55593a8
AlmaLinux:8 python3-criu 0 3.18-5.module_el8.10.0+3901+4b80ecd7
AlmaLinux:8 python3-podman 0 4.9.0-2.module_el8.10.0+3876+e55593a8
AlmaLinux:8 runc 0 1:1.1.12-5.module_el8.10.0+3909+6e1c1eb7
AlmaLinux:8 skopeo 0 2:1.14.5-3.module_el8.10.0+3876+e55593a8
AlmaLinux:8 skopeo 0 2:1.14.5-3.module_el8.10.0+3901+4b80ecd7
AlmaLinux:8 skopeo 0 2:1.14.5-3.module_el8.10.0+3909+6e1c1eb7
AlmaLinux:8 skopeo-tests 0 2:1.14.5-3.module_el8.10.0+3876+e55593a8
AlmaLinux:8 skopeo-tests 0 2:1.14.5-3.module_el8.10.0+3901+4b80ecd7
AlmaLinux:8 slirp4netns 0 1.2.3-1.module_el8.10.0+3845+87b84552
AlmaLinux:8 slirp4netns 0 1.2.3-1.module_el8.10.0+3876+e55593a8
AlmaLinux:8 slirp4netns 0 1.2.3-1.module_el8.10.0+3901+4b80ecd7
AlmaLinux:8 toolbox 0 0.0.99.5-2.module_el8.10.0+3845+87b84552
AlmaLinux:8 toolbox 0 0.0.99.5-2.module_el8.10.0+3858+6ad51f9f
AlmaLinux:8 toolbox 0 0.0.99.5-2.module_el8.10.0+3876+e55593a8
AlmaLinux:8 toolbox 0 0.0.99.5-2.module_el8.10.0+3901+4b80ecd7
AlmaLinux:8 toolbox-tests 0 0.0.99.5-2.module_el8.10.0+3858+6ad51f9f
AlmaLinux:8 toolbox-tests 0 0.0.99.5-2.module_el8.10.0+3909+6e1c1eb7
AlmaLinux:8 udica 0 0.2.6-21.module_el8.10.0+3876+e55593a8
AlmaLinux:9 buildah 0 2:1.33.9-1.el9_4
AlmaLinux:9 buildah 0 2:1.37.5-1.el9_5
AlmaLinux:9 buildah-tests 0 2:1.33.9-1.el9_4
AlmaLinux:9 buildah-tests 0 2:1.37.5-1.el9_5
AlmaLinux:9 podman 0 4:4.9.4-13.el9_4
AlmaLinux:9 podman 0 4:5.2.2-9.el9_5
AlmaLinux:9 podman-docker 0 4:4.9.4-13.el9_4
AlmaLinux:9 podman-docker 0 4:5.2.2-9.el9_5
AlmaLinux:9 podman-plugins 0 4:4.9.4-13.el9_4
AlmaLinux:9 podman-plugins 0 4:5.2.2-9.el9_5
AlmaLinux:9 podman-remote 0 4:4.9.4-13.el9_4
AlmaLinux:9 podman-remote 0 4:5.2.2-9.el9_5
AlmaLinux:9 podman-tests 0 4:4.9.4-13.el9_4
AlmaLinux:9 podman-tests 0 4:5.2.2-9.el9_5
Chainguard buildah 0 1.37.3-r1
Chainguard podman 0 5.4.1-r2
Chainguard podman-doc 0 5.4.1-r2
Chainguard skopeo 0 1.16.1-r2
Chainguard skopeo-fips 0 1.16.1-r2
Chainguard zot 0 2.1.1-r3
Debian:11 golang-github-containers-common 0 No fix
Debian:12 golang-github-containers-common 0 No fix
Debian:13 golang-github-containers-common 0 No fix
Mageia:9 buildah 0 1.37.4-1.mga9
Mageia:9 podman 0 4.9.5-1.mga9
Mageia:9 skopeo 0 1.16.1-1.mga9
Red Hat:enterprise_linux:8::appstream aardvark-dns 0 2:1.10.1-2.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream buildah 0 2:1.33.10-1.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream buildah-debuginfo 0 2:1.33.10-1.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream buildah-debugsource 0 2:1.33.10-1.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream buildah-tests 0 2:1.33.10-1.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream buildah-tests-debuginfo 0 2:1.33.10-1.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream cockpit-podman 0 0:84.1-1.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream conmon 0 3:2.1.10-1.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream conmon-debuginfo 0 3:2.1.10-1.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream conmon-debugsource 0 3:2.1.10-1.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream container-selinux 0 2:2.229.0-2.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream containernetworking-plugins 0 1:1.4.0-5.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream containernetworking-plugins-debuginfo 0 1:1.4.0-5.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream containernetworking-plugins-debugsource 0 1:1.4.0-5.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream containers-common 0 2:1-82.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream crit 0 0:3.18-5.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream criu 0 0:3.18-5.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream criu-debuginfo 0 0:3.18-5.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream criu-debugsource 0 0:3.18-5.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream criu-devel 0 0:3.18-5.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream criu-libs 0 0:3.18-5.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream criu-libs-debuginfo 0 0:3.18-5.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream crun 0 0:1.14.3-2.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream crun-debuginfo 0 0:1.14.3-2.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream crun-debugsource 0 0:1.14.3-2.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream fuse-overlayfs 0 0:1.13-1.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream fuse-overlayfs-debuginfo 0 0:1.13-1.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream fuse-overlayfs-debugsource 0 0:1.13-1.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream libslirp 0 0:4.4.0-2.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream libslirp-debuginfo 0 0:4.4.0-2.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream libslirp-debugsource 0 0:4.4.0-2.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream libslirp-devel 0 0:4.4.0-2.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream netavark 0 2:1.10.3-1.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream oci-seccomp-bpf-hook 0 0:1.2.10-1.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream oci-seccomp-bpf-hook-debuginfo 0 0:1.2.10-1.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream oci-seccomp-bpf-hook-debugsource 0 0:1.2.10-1.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream podman 0 4:4.9.4-15.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream podman-catatonit 0 4:4.9.4-15.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream podman-catatonit-debuginfo 0 4:4.9.4-15.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream podman-debuginfo 0 4:4.9.4-15.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream podman-debugsource 0 4:4.9.4-15.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream podman-docker 0 4:4.9.4-15.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream podman-gvproxy 0 4:4.9.4-15.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream podman-gvproxy-debuginfo 0 4:4.9.4-15.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream podman-plugins 0 4:4.9.4-15.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream podman-plugins-debuginfo 0 4:4.9.4-15.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream podman-remote 0 4:4.9.4-15.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream podman-remote-debuginfo 0 4:4.9.4-15.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream podman-tests 0 4:4.9.4-15.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream python-podman 0 0:4.9.0-2.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream python3-criu 0 0:3.18-5.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream python3-podman 0 0:4.9.0-2.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream runc 0 1:1.1.12-5.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream runc-debuginfo 0 1:1.1.12-5.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream runc-debugsource 0 1:1.1.12-5.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream skopeo 0 2:1.14.5-3.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream skopeo-tests 0 2:1.14.5-3.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream slirp4netns 0 0:1.2.3-1.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream slirp4netns-debuginfo 0 0:1.2.3-1.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream slirp4netns-debugsource 0 0:1.2.3-1.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream toolbox 0 0:0.0.99.5-2.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream toolbox-debuginfo 0 0:0.0.99.5-2.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream toolbox-debugsource 0 0:0.0.99.5-2.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream toolbox-tests 0 0:0.0.99.5-2.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:8::appstream udica 0 0:0.2.6-21.module+el8.10.0+22397+e3c95ba6
Red Hat:enterprise_linux:9::appstream buildah 0 2:1.33.9-1.el9_4
Red Hat:enterprise_linux:9::appstream buildah 0 2:1.37.5-1.el9_5
Red Hat:enterprise_linux:9::appstream buildah-debuginfo 0 2:1.33.9-1.el9_4
Red Hat:enterprise_linux:9::appstream buildah-debuginfo 0 2:1.37.5-1.el9_5
Red Hat:enterprise_linux:9::appstream buildah-debugsource 0 2:1.33.9-1.el9_4
Red Hat:enterprise_linux:9::appstream buildah-debugsource 0 2:1.37.5-1.el9_5
Red Hat:enterprise_linux:9::appstream buildah-tests 0 2:1.33.9-1.el9_4
Red Hat:enterprise_linux:9::appstream buildah-tests 0 2:1.37.5-1.el9_5
Red Hat:enterprise_linux:9::appstream buildah-tests-debuginfo 0 2:1.33.9-1.el9_4
Red Hat:enterprise_linux:9::appstream buildah-tests-debuginfo 0 2:1.37.5-1.el9_5
Red Hat:enterprise_linux:9::appstream podman 0 4:4.9.4-13.el9_4
Red Hat:enterprise_linux:9::appstream podman 0 4:5.2.2-9.el9_5
Red Hat:enterprise_linux:9::appstream podman-debuginfo 0 4:4.9.4-13.el9_4
Red Hat:enterprise_linux:9::appstream podman-debuginfo 0 4:5.2.2-9.el9_5
Red Hat:enterprise_linux:9::appstream podman-debugsource 0 4:4.9.4-13.el9_4
Red Hat:enterprise_linux:9::appstream podman-debugsource 0 4:5.2.2-9.el9_5
Red Hat:enterprise_linux:9::appstream podman-docker 0 4:4.9.4-13.el9_4
Red Hat:enterprise_linux:9::appstream podman-docker 0 4:5.2.2-9.el9_5
Red Hat:enterprise_linux:9::appstream podman-plugins 0 4:4.9.4-13.el9_4
Red Hat:enterprise_linux:9::appstream podman-plugins 0 4:5.2.2-9.el9_5
Red Hat:enterprise_linux:9::appstream podman-plugins-debuginfo 0 4:4.9.4-13.el9_4
Red Hat:enterprise_linux:9::appstream podman-plugins-debuginfo 0 4:5.2.2-9.el9_5
Red Hat:enterprise_linux:9::appstream podman-remote 0 4:4.9.4-13.el9_4
Red Hat:enterprise_linux:9::appstream podman-remote 0 4:5.2.2-9.el9_5
Red Hat:enterprise_linux:9::appstream podman-remote-debuginfo 0 4:4.9.4-13.el9_4
Red Hat:enterprise_linux:9::appstream podman-remote-debuginfo 0 4:5.2.2-9.el9_5
Red Hat:enterprise_linux:9::appstream podman-tests 0 4:4.9.4-13.el9_4
Red Hat:enterprise_linux:9::appstream podman-tests 0 4:5.2.2-9.el9_5
Red Hat:openshift:4.12::el8 containernetworking-plugins 0 1:1.4.0-4.rhaos4.12.el8
Red Hat:openshift:4.12::el8 containernetworking-plugins-debuginfo 0 1:1.4.0-4.rhaos4.12.el8
Red Hat:openshift:4.12::el8 containernetworking-plugins-debugsource 0 1:1.4.0-4.rhaos4.12.el8
Red Hat:openshift:4.12::el8 cri-o 0 0:1.25.5-30.rhaos4.12.git53dc492.el8
Red Hat:openshift:4.12::el8 cri-o-debuginfo 0 0:1.25.5-30.rhaos4.12.git53dc492.el8
Red Hat:openshift:4.12::el8 cri-o-debugsource 0 0:1.25.5-30.rhaos4.12.git53dc492.el8
Red Hat:openshift:4.12::el8 podman 0 3:4.4.1-8.rhaos4.12.el8

Related vulnerabilities