RHSA-2023:6474: podman Red Hat

CVSS: 9.8v3.1CriticalPublished

Published 02-10-2024Last modified 20-10-2026

Open JSON

Vulnerability summary

RHSA-2023:6474 is a critical (CVSS 9.8) vulnerability in podman Red Hat.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.8/10

010

Critical · v3.1 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 13 · Downstream 0 · Related 4

CVE-2022-41723 CVE-2022-41724 CVE-2022-41725 CVE-2023-24534 CVE-2023-24536 CVE-2023-24537+7 more

Timeline

02-10-2024
PublishedVulnerability first disclosed.
20-10-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: podman security, bug fix, and enhancement update

CVSS metrics

1 score · 1 source · 1 version

v3.19.8

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat11 products

podman< 2:4.6.1-5.el9
podman-debuginfo< 2:4.6.1-5.el9
podman-debugsource< 2:4.6.1-5.el9
podman-docker< 2:4.6.1-5.el9
podman-gvproxy< 2:4.6.1-5.el9

Show all 11

1 vendor · 11 products

References

104 links

Show all 100 references

bugzilla.redhat.com/show_bug.cgi?id=2182485REPORT
bugzilla.redhat.com/show_bug.cgi?id=2182896REPORT
bugzilla.redhat.com/show_bug.cgi?id=2183597REPORT
bugzilla.redhat.com/show_bug.cgi?id=2183975REPORT
bugzilla.redhat.com/show_bug.cgi?id=2184481REPORT
bugzilla.redhat.com/show_bug.cgi?id=2184482REPORT
bugzilla.redhat.com/show_bug.cgi?id=2184483REPORT
bugzilla.redhat.com/show_bug.cgi?id=2184484REPORT
bugzilla.redhat.com/show_bug.cgi?id=2187187REPORT
bugzilla.redhat.com/show_bug.cgi?id=2188340REPORT
bugzilla.redhat.com/show_bug.cgi?id=2196026REPORT
bugzilla.redhat.com/show_bug.cgi?id=2196027REPORT
bugzilla.redhat.com/show_bug.cgi?id=2196029REPORT
bugzilla.redhat.com/show_bug.cgi?id=2222167REPORT
bugzilla.redhat.com/show_bug.cgi?id=2223350REPORT
bugzilla.redhat.com/show_bug.cgi?id=2228689REPORT
bugzilla.redhat.com/show_bug.cgi?id=2229644REPORT
bugzilla.redhat.com/show_bug.cgi?id=2230212REPORT
bugzilla.redhat.com/show_bug.cgi?id=2231975REPORT
bugzilla.redhat.com/show_bug.cgi?id=2232308REPORT
bugzilla.redhat.com/show_bug.cgi?id=2233222REPORT
issues.redhat.com/browse/RHEL-3132ARTICLE
issues.redhat.com/browse/RHEL-3133ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6474.jsonAdvisory
access.redhat.com/security/cve/CVE-2022-41723REPORT
www.cve.org/CVERecord?id=CVE-2022-41723Advisory
nvd.nist.gov/vuln/detail/CVE-2022-41723Advisory
github.com/advisories/GHSA-vvpx-j8f3-3w6hAdvisory
go.dev/cl/468135ARTICLE
go.dev/cl/468295ARTICLE
go.dev/issue/57855ARTICLE
groups.google.com/g/golang-announce/c/V0aBFqaFs_EARTICLE
pkg.go.dev/vuln/GO-2023-1571Advisory
vuln.go.dev/ID/GO-2023-1571.jsonARTICLE
access.redhat.com/security/cve/CVE-2022-41724REPORT
www.cve.org/CVERecord?id=CVE-2022-41724Advisory
nvd.nist.gov/vuln/detail/CVE-2022-41724Advisory
go.dev/cl/468125ARTICLE
go.dev/issue/58001ARTICLE
pkg.go.dev/vuln/GO-2023-1570Advisory
access.redhat.com/security/cve/CVE-2022-41725REPORT
www.cve.org/CVERecord?id=CVE-2022-41725Advisory
nvd.nist.gov/vuln/detail/CVE-2022-41725Advisory
go.dev/cl/468124ARTICLE
go.dev/issue/58006ARTICLE
pkg.go.dev/vuln/GO-2023-1569Advisory
access.redhat.com/security/cve/CVE-2023-3978REPORT
www.cve.org/CVERecord?id=CVE-2023-3978Advisory
nvd.nist.gov/vuln/detail/CVE-2023-3978Advisory
go.dev/cl/514896ARTICLE
go.dev/issue/61615ARTICLE
pkg.go.dev/vuln/GO-2023-1988Advisory
access.redhat.com/security/cve/CVE-2023-24534REPORT
www.cve.org/CVERecord?id=CVE-2023-24534Advisory
nvd.nist.gov/vuln/detail/CVE-2023-24534Advisory
go.dev/issue/58975ARTICLE
groups.google.com/g/golang-announce/c/Xdv6JL9ENs8ARTICLE
access.redhat.com/security/cve/CVE-2023-24536REPORT
www.cve.org/CVERecord?id=CVE-2023-24536Advisory
nvd.nist.gov/vuln/detail/CVE-2023-24536Advisory
go.dev/issue/59153ARTICLE
access.redhat.com/security/cve/CVE-2023-24537REPORT
www.cve.org/CVERecord?id=CVE-2023-24537Advisory
nvd.nist.gov/vuln/detail/CVE-2023-24537Advisory
github.com/golang/go/issues/59180ARTICLE
access.redhat.com/security/cve/CVE-2023-24538REPORT
www.cve.org/CVERecord?id=CVE-2023-24538Advisory
nvd.nist.gov/vuln/detail/CVE-2023-24538Advisory
github.com/golang/go/issues/59234ARTICLE
access.redhat.com/security/cve/CVE-2023-24539REPORT
www.cve.org/CVERecord?id=CVE-2023-24539Advisory
nvd.nist.gov/vuln/detail/CVE-2023-24539Advisory
github.com/golang/go/issues/59720ARTICLE
groups.google.com/g/golang-announce/c/MEb0UyuSMsUARTICLE
access.redhat.com/security/cve/CVE-2023-24540REPORT
www.cve.org/CVERecord?id=CVE-2023-24540Advisory
nvd.nist.gov/vuln/detail/CVE-2023-24540Advisory
go.dev/issue/59721ARTICLE
access.redhat.com/security/cve/CVE-2023-25173REPORT
www.cve.org/CVERecord?id=CVE-2023-25173Advisory
nvd.nist.gov/vuln/detail/CVE-2023-25173Advisory
github.com/containerd/containerd/commit/133f6bb6cd827ce35a5fb279c1ead12b9d21460aARTICLE
github.com/containerd/containerd/releases/tag/v1.5.18ARTICLE
github.com/containerd/containerd/releases/tag/v1.6.18ARTICLE
github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653pARTICLE
www.benthamsgaze.org/2022/08/22/vulnerability-in-linux-containers-investigation-and-mitigation/ARTICLE
access.redhat.com/security/cve/CVE-2023-29400REPORT
www.cve.org/CVERecord?id=CVE-2023-29400Advisory
nvd.nist.gov/vuln/detail/CVE-2023-29400Advisory
go.dev/issue/59722ARTICLE

Showing 100 of 104. Use Open JSON for the complete list.