CVE-2024-3056

See a problem?

Source

https://nvd.nist.gov/vuln/detail/CVE-2024-3056

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-3056.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-3056

Aliases

Related

UBUNTU-CVE-2024-3056

Published

2024-08-02T21:16:30Z

Modified

2024-10-08T04:09:48.670660Z

Severity

4.8 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

A flaw was found in Podman. This issue may allow an attacker to create a specially crafted container that, when configured to share the same IPC with at least one other container, can create a large number of IPC resources in /dev/shm. The malicious container will continue to exhaust resources until it is out-of-memory (OOM) killed. While the malicious container's cgroup will be removed, the IPC resources it created are not. Those resources are tied to the IPC namespace that will not be removed until all containers using it are stopped, and one non-malicious container is holding the namespace open. The malicious container is restarted, either automatically or by attacker control, repeating the process and increasing the amount of memory consumed. With a container configured to restart always, such as podman run --restart=always, this can result in a memory-based denial of service of the system.

References

Affected packages

Debian:11 / libpod

Package

Name: libpod
Purl: pkg:deb/debian/libpod?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.0.1+dfsg1-3

3.0.1+dfsg1-3+deb11u1

3.0.1+dfsg1-3+deb11u2

3.0.1+dfsg1-3+deb11u3

3.0.1+dfsg1-3+deb11u4

3.0.1+dfsg1-3+deb11u5

3.1.0+ds1-1

3.1.2+ds1-1

3.2.0+ds5-1

3.2.0+ds5-2

3.2.1+ds1-1

3.2.1+ds1-2

3.2.2+ds1-1

3.2.3+ds1-1

3.3.0+ds2-1

3.3.0+ds2-2

3.3.1+ds2-1

3.4.0+ds1-1

3.4.1+ds1-1

3.4.1+ds1-2

3.4.2+ds1-1

3.4.3+ds1-1

3.4.4+ds1-1

3.4.6+ds1-1

3.4.7+ds1-1

3.4.7+ds1-2

3.4.7+ds1-3

4.*

4.0.0~rc5+ds1-1

4.0.1+ds1-1

4.0.1+ds1-2

4.0.1+ds1-3

4.0.3+ds1-1

4.1.0+ds2-1

4.1.0+ds2-2

4.1.1+ds1-1

4.1.1+ds1-2

4.2.0+ds1-1

4.2.0+ds1-2

4.2.0+ds1-3

4.3.1+ds1-1

4.3.1+ds1-2

4.3.1+ds1-3

4.3.1+ds1-4

4.3.1+ds1-5

4.3.1+ds1-6

4.3.1+ds1-7

4.3.1+ds1-8

4.4.0+ds1-1

4.5.0+ds2-1

4.5.1+ds1-1

4.5.1+ds1-2

4.6.2+ds1-1

4.6.2+ds1-2

4.6.2+ds1-3

4.6.2+ds1-4

4.7.1+ds4-1

4.7.1+ds4-2

4.7.1+ds4-3

4.7.1+ds4-4

4.7.1+ds4-5

4.7.2+ds1-1

4.7.2+ds1-2

4.8.3+ds1-1

4.8.3+ds1-2

4.9.0+ds1-1

4.9.0+ds1-2

4.9.2+ds1-1

4.9.2+ds1-2

4.9.3+ds1-1

4.9.4+ds1-1

4.9.5+ds1-1

5.*

5.0.0+ds1-1

5.0.2+ds1-1

5.0.2+ds1-2

5.0.2+ds1-3

5.0.3+ds1-1

5.0.3+ds1-2

5.0.3+ds1-3

5.0.3+ds1-4

5.0.3+ds1-5

5.2.0+ds1-1

5.2.0+ds1-2

5.2.0+ds1-3

5.2.0+ds1-4

5.2.0+ds1-5

5.2.1+ds1-1

5.2.1+ds1-2

5.2.1+ds1-3

5.2.1+ds1-4

5.2.2+ds1-1

5.2.2+ds1-2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / libpod

Package

Name: libpod
Purl: pkg:deb/debian/libpod?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.3.1+ds1-8

4.3.1+ds1-8+deb12u1

4.4.0+ds1-1

4.5.0+ds2-1

4.5.1+ds1-1

4.5.1+ds1-2

4.6.2+ds1-1

4.6.2+ds1-2

4.6.2+ds1-3

4.6.2+ds1-4

4.7.1+ds4-1

4.7.1+ds4-2

4.7.1+ds4-3

4.7.1+ds4-4

4.7.1+ds4-5

4.7.2+ds1-1

4.7.2+ds1-2

4.8.3+ds1-1

4.8.3+ds1-2

4.9.0+ds1-1

4.9.0+ds1-2

4.9.2+ds1-1

4.9.2+ds1-2

4.9.3+ds1-1

4.9.4+ds1-1

4.9.5+ds1-1

5.*

5.0.0+ds1-1

5.0.2+ds1-1

5.0.2+ds1-2

5.0.2+ds1-3

5.0.3+ds1-1

5.0.3+ds1-2

5.0.3+ds1-3

5.0.3+ds1-4

5.0.3+ds1-5

5.2.0+ds1-1

5.2.0+ds1-2

5.2.0+ds1-3

5.2.0+ds1-4

5.2.0+ds1-5

5.2.1+ds1-1

5.2.1+ds1-2

5.2.1+ds1-3

5.2.1+ds1-4

5.2.2+ds1-1

5.2.2+ds1-2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / podman

Package

Name: podman
Purl: pkg:deb/debian/podman?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.2.2+ds1-3

5.2.2+ds1-4

5.2.3+ds1-1

5.2.3+ds1-2

5.2.3+ds1-3

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/containers/podman

Affected ranges

Type: GIT
Repo: https://github.com/containers/podman
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

84c8870ac236578c41713113fc09a29a5f727bdd

Last affected

b22d5c61eef93475413724f49fd6a32980d2c746

Affected versions

v0.*

v0.10.1

v0.10.1.1

v0.10.1.2

v0.10.1.3

v0.11.1

v0.11.1.1

v0.12.1

v0.12.1.1

v0.12.1.2

v0.2

v0.2.1

v0.2.2

v0.3.1

v0.3.2

v0.3.3

v0.3.4

v0.3.5

v0.4.1

v0.4.2

v0.4.3

v0.4.4

v0.5.1

v0.5.2

v0.5.3

v0.5.4

v0.6.1

v0.6.2

v0.6.3

v0.6.4

v0.6.5

v0.7.1

v0.7.2

v0.7.3

v0.7.4

v0.8.1

v0.8.2

v0.8.2.1

v0.8.3

v0.8.4

v0.8.5

v0.9.1

v0.9.1.1

v0.9.2

v0.9.2.1

v0.9.3

v0.9.3.1

v1.*

v1.1.0

v1.1.1

v1.1.2

v1.2.0

v1.3.0

v1.3.1

v1.4.0

v1.4.1

v1.4.2

v1.4.3

v1.4.4

v1.5.0

v1.5.1

v1.6.0

v1.6.0-rc1

v1.6.0-rc2

v1.6.1

v1.6.1-rc1

v1.6.2

v1.6.2-rc1

v1.7.0

v1.7.0-rc1

v1.7.0-rc2

v1.8.0

v1.8.0-rc1

v1.8.1

v1.8.1-rc1

v1.8.1-rc2

v1.8.1-rc3

v1.8.1-rc4

v1.8.2

v1.8.2-rc1

v1.9.0

v1.9.0-rc1

v1.9.0-rc2

v2.*

v2.0.0-rc1

v2.0.0-rc2

v2.0.0-rc3

v2.0.0-rc4

v2.0.0-rc5

v2.0.0-rc6

v2.0.0-rc7

v2.1.0

v2.1.0-rc1

v2.1.0-rc2

v2.2.0-rc1

v2.2.0-rc2

v3.*

v3.1.0-rc1

v3.2.0-rc1

v4.*

v4.0.0

v4.0.0-rc1

v4.0.0-rc2

v4.0.0-rc3

v4.0.0-rc4

v4.0.0-rc5

v4.3.0-rc1

v4.4.0-rc1

v4.4.0-rc2

v4.5.0-rc1

v5.*

v5.0.0-rc1

v5.0.0-rc2

v5.0.0-rc3

v5.0.0-rc4

v5.0.0-rc5

v5.0.0-rc6

v5.2.0

v5.2.0-rc1

v5.2.0-rc2

v5.2.0-rc3