CVE-2020-1726 - Libpod Project Libpod, Redhat Openshift Container Platform and Redhat Enterprise Linux

Moderate 5.9

A flaw was discovered in Podman where it incorrectly allows containers when created to overwrite existing files in volumes, even if they are mounted as read-only. When a user runs a malicious container or a container based on a malicious image with an attached volume that is used for the first time, it is possible to trigger the flaw and overwrite files in the volume.This issue was introduced in version 1.6.0.

Affected software

Libpod Project Libpod

Redhat Openshift Container Platform

Redhat Enterprise Linux

Reference links

Get alerted to vulnerabilities in your software

CVE alerts, vulnerability alerts, latest versions and news matched to your software stack.