High severity · published Sep 13, 2022
CVE-2022-2989
An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker…
7.1
CVSS
0.3%
EPSS
No
On KEV
Description
An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 25% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EL
Enterprise Linux · Redhat
7.0; 8.0; 9.0 · source: NVD
OC
Openshift Container Platform · Redhat
3.11; 4.0 · source: NVD
PO
Podman · Podman Project
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-2989
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-2989
Exploit
https://bugzilla.redhat.com/show_bug.cgi?id=2121445
Exploit
https://www.benthamsgaze.org/2022/08/22/vulnerability-in-linux-containers-investigation-and-mitigation/
More from Podman
8.8
CVE-2019-25067
A vulnerability, which was classified as critical, was found in Podman and Varlink 1.5.1
8.8
CVE-2022-1227
A privilege escalation flaw was found in Podman
7.8
CVE-2026-33414
PowerShell Command Injection in Podman HyperV Machine
7.7
CVE-2024-3056
A flaw was found in Podman
7.5
CVE-2026-57231
Podman: Malformed Image can trick podman run into leaking host environment variables into the container