Exploitation Summary
EIP tracks 1 public exploit for CVE-2019-25067. PoCs published by Jeremy Brown.
AI-analyzed exploit summary This exploit targets Podman & Varlink 1.5.1, allowing remote code execution via the ContainerRunlabel API, DoS via parsing bugs, and arbitrary file reads via directory traversal in the SearchImages API. It demonstrates multiple attack vectors including command execution, denial of service, and information leakage.
Description
A vulnerability, which was classified as critical, was found in Podman and Varlink 1.5.1. This affects an unknown part of the component API. The manipulation leads to Remote Privilege Escalation. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-143949 was assigned to this vulnerability.
Exploits (1)
This exploit targets Podman & Varlink 1.5.1, allowing remote code execution via the ContainerRunlabel API, DoS via parsing bugs, and arbitrary file reads via directory traversal in the SearchImages API. It demonstrates multiple attack vectors including command execution, denial of service, and information leakage.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L