CVE-2019-25067 Podman/Varlink API Privilege Escalation
Remote attackers can escalate privileges via the Podman and Varlink API, requiring immediate patching for container infrastructure security.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2019-25067?
CVE-2019-25067 is a medium-severity vulnerability in Podman, published on 9 Jun 2022. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A vulnerability, which was classified as critical, was found in Podman and Varlink 1.5.1. This affects an unknown part of the component API. The manipulation leads to Remote Privilege Escalation. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-143949 was assigned to this vulnerability.
Which versions are affected by CVE-2019-25067?
It affects 2 products.
Products include Podman Project Podman, Varlink Varlink.
How do I fix CVE-2019-25067?
Apply the vendor's patch.
Is CVE-2019-25067 being exploited?
There is no known exploitation of CVE-2019-25067 in the wild and no public exploit code.
Other vulnerabilities in Podman
- CVE-2026-57231 Podman: Malformed Image can trick podman run into leaking host environment variables into the container
- CVE-2022-2738 Use after free in podman
- CVE-2022-2989 Podman's incorrect handling of the supplementary groups may lead to data disclosure, modification
- CVE-2021-20188 Improper Authorization in github.com/containers/libpod
- CVE-2023-0778 Podman Time-of-check Time-of-use (TOCTOU) Race Condition
Sources
Also known as DEBIAN-CVE-2019-25067, GHSA-vjwp-mggj-92gq, UBUNTU-CVE-2019-25067.