Threats tagged 'ghsa-wq2p-5pc6-wpgf'

A symlink traversal vulnerability in the containers/storage library affects Podman, Buildah, and CRI-O. This flaw can cause these container tools to hang and lead to a denial of service via out-of-memory (OOM) kill when running a malicious container image with an automatically assigned user namespace (--userns=auto). The vulnerability arises because the containers/storage library reads /etc/passwd inside the container without properly validating if it is a symlink, allowing arbitrary file reads on the host.