CVE-2019-10152 Podman Path Traversal Vulnerability leads to arbitrary file read/write

What is CVE-2019-10152?

CVE-2019-10152 is a high-severity path traversal vulnerability in Opensuse Leap, published on 30 Jul 2019. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

A path traversal vulnerability has been discovered in podman before version 1.4.0 in the way it handles symlinks inside containers. An attacker who has compromised an existing container can cause arbitrary files on the host filesystem to be read/written when an administrator tries to copy a file from/to the container.

Weakness: CWE-59, CWE-22

Which versions are affected by CVE-2019-10152?

3 open source packages ship an affected version, including github.com/containers/podman. It affects 2 products.

Products include Libpod Project Libpod, Opensuse Leap.

How do I fix CVE-2019-10152?

Upgrade github.com/containers/podman to 1.4.0 or later.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2019-10152 being exploited?

There is no known exploitation of CVE-2019-10152 in the wild and no public exploit code.

Other vulnerabilities in Opensuse Leap

• CVE-2020-1726 Podman has Files or Directories Accessible to External Parties Medium 5.9
• CVE-2019-18466 Podman Symlink Vulnerability Medium 5.5
• CVE-2018-10856 Podman Elevated Container Privileges Medium 5.3

All Opensuse Leap vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-rh5f-2w6r-q7vj, GO-2023-1927, RHSA-2019:1907.