Lucene search
Veracode Vulnerability DatabaseVERACODE:22492HistoryFeb 12, 2020 - 9:24 a.m.
Unauthorized File Overwrite
2020-02-1209:24:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
0.002 Low
EPSS
Percentile
58.8%
github.com/containers/libpod is vulnerable to unauthorised file overwritten. The library fails to check if the volume is empty before copying even if the containers are mounted as read-only, allowing the existing files in the volumes to be overwritten.
References
lists.opensuse.org/opensuse-security-announce/2020-09/msg00097.html
lists.opensuse.org/opensuse-security-announce/2020-09/msg00103.html
access.redhat.com/errata/RHSA-2020:0680
access.redhat.com/errata/RHSA-2020:1650
access.redhat.com/security/cve/CVE-2020-1726
bugzilla.redhat.com/show_bug.cgi?id=1801152
bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1726
github.com/containers/libpod/pull/5168
Related
nessus
nessus
openSUSE Security Update : conmon / fuse-overlayfs / libcontainers-common / etc (openSUSE-2020-1559)
2020-09-30 00:00:00
openSUSE Security Update : conmon / fuse-overlayfs / libcontainers-common / etc (openSUSE-2020-1552)
2020-10-05 00:00:00
RHEL 8 : OpenShift Container Platform 4.3.5 podman (RHSA-2020:0680)
2020-03-11 00:00:00
nvd
nvd
CVE-2020-1726
2020-02-11 20:15:12
osv
osv
CVE-2020-1726
2020-02-11 20:15:12
Podman has Files or Directories Accessible to External Parties
2022-05-24 17:08:34
Moderate: container-tools:rhel8 security, bug fix, and enhancement update
2020-04-28 09:01:00
github
github
Podman has Files or Directories Accessible to External Parties
2022-05-24 17:08:34
prion
prion
Code injection
2020-02-11 20:15:00
debiancve
debiancve
CVE-2020-1726
2020-02-11 20:15:12
openvas
openvas
openSUSE: Security Advisory for conmon, (openSUSE-SU-2020:1552-1)
2020-09-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:2731-1)
2021-06-09 00:00:00
openSUSE: Security Advisory for conmon, (openSUSE-SU-2020:1559-1)
2020-09-29 00:00:00
suse
suse
alpinelinux
alpinelinux
CVE-2020-1726
2020-02-11 20:15:12
cve
cve
CVE-2020-1726
2020-02-11 20:15:12
redhat
redhat
cvelist
cvelist
CVE-2020-1726
2020-02-11 19:45:26
redhatcve
redhatcve
CVE-2020-1726
2020-04-07 11:38:35
ubuntucve
ubuntucve
CVE-2020-1726
2020-02-11 00:00:00
rocky
rocky
container-tools:rhel8 security, bug fix, and enhancement update
2020-04-28 09:01:00
almalinux
almalinux
Moderate: container-tools:rhel8 security, bug fix, and enhancement update
2020-04-28 09:01:00
oraclelinux
oraclelinux
container-tools:ol8 security, bug fix, and enhancement update
2020-05-05 00:00:00