Oval Definition:oval:org.opensuse.security:def:20214024
Revision Date:2023-06-22Version:1
Title:CVE-2021-4024
Description:

A flaw was found in podman. The `podman machine` function (used to create and manage Podman virtual machine containing a Podman process) spawns a `gvproxy` process on the host system. The `gvproxy` API is accessible on port 7777 on all IP addresses on the host. If that port is open on the host's firewall, an attacker can potentially use the `gvproxy` API to forward ports on the host to ports in the VM, making private services on the VM accessible to the network. This issue could be also used to interrupt the host's services by forwarding all ports to the VM.
Family:unixClass:vulnerability
Status:Reference(s):Mitre CVE-2021-4024
SUSE CVE-2021-4024
SUSE-CU-2022:263-1
SUSE-CU-2022:309-1
SUSE-CU-2022:313-1
SUSE-IU-2022:357-1
SUSE-IU-2022:358-1
SUSE-IU-2022:359-1
SUSE-SU-2022:23018-1
openSUSE-SU-2022:23018-1
SUSE-CU-2022:1765-1
SUSE-SU-2023:0187-1
SUSE-SU-2023:0326-1
Platform(s):Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure
Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM
Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE
Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure
Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM
Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE
openSUSE Leap 15.3
openSUSE Tumbleweed
SUSE CaaS Platform 4.0
SUSE Enterprise Storage 7
SUSE Linux Enterprise Desktop 15 SP3
SUSE Linux Enterprise High Performance Computing 15 SP2
SUSE Linux Enterprise High Performance Computing 15 SP3
SUSE Linux Enterprise High Performance Computing 15 SP4
SUSE Linux Enterprise High Performance Computing 15 SP5
SUSE Linux Enterprise Micro 5.0
SUSE Linux Enterprise Micro 5.1
SUSE Linux Enterprise Micro 5.3
SUSE Linux Enterprise Module for Basesystem 15 SP3
SUSE Linux Enterprise Module for Containers 15 SP2
SUSE Linux Enterprise Module for Containers 15 SP3
SUSE Linux Enterprise Module for Containers 15 SP4
SUSE Linux Enterprise Module for Containers 15 SP5
SUSE Linux Enterprise Server 15 SP2
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server for SAP Applications 15 SP1
SUSE Linux Enterprise Server for SAP Applications 15 SP2
SUSE Linux Enterprise Server for SAP Applications 15 SP3
SUSE Linux Enterprise Server for SAP Applications 15 SP4
SUSE Linux Enterprise Server for SAP Applications 15 SP5
SUSE Linux Enterprise Storage 7
SUSE Linux Enterprise Storage 7.1
SUSE Manager Proxy 4.1
SUSE Manager Proxy 4.2
SUSE Manager Proxy 4.3
SUSE Manager Retail Branch Server 4.1
SUSE Manager Retail Branch Server 4.2
SUSE Manager Retail Branch Server 4.3
SUSE Manager Server 4.1
SUSE Manager Server 4.2
SUSE Manager Server 4.3
Product(s):
Definition Synopsis
  • openSUSE Leap 15.3 is installed
  • AND Package Information
  • conmon-2.0.30-150300.8.3.1 is installed
  • AND conmon is signed with openSUSE key
  • OR
  • libcontainers-common-20210626-150300.8.3.1 is installed
  • AND libcontainers-common is signed with openSUSE key
  • OR
  • libseccomp-devel-2.5.3-150300.10.5.1 is installed
  • AND libseccomp-devel is signed with openSUSE key
  • OR
  • libseccomp-tools-2.5.3-150300.10.5.1 is installed
  • AND libseccomp-tools is signed with openSUSE key
  • OR
  • libseccomp2-2.5.3-150300.10.5.1 is installed
  • AND libseccomp2 is signed with openSUSE key
  • OR
  • libseccomp2-32bit-2.5.3-150300.10.5.1 is installed
  • AND libseccomp2-32bit is signed with openSUSE key
  • OR
  • podman-3.4.4-150300.9.3.2 is installed
  • AND podman is signed with openSUSE key
  • OR
  • podman-cni-config-3.4.4-150300.9.3.2 is installed
  • AND podman-cni-config is signed with openSUSE key
    • Definition Synopsis
  • Release Information
  • SUSE CaaS Platform 4.0 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed
  • AND Package Information
  • podman is not affected
  • OR podman-cni-config is not affected
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Containers 15 SP2 is installed
  • AND podman is not affected
    • Definition Synopsis
  • openSUSE Tumbleweed is installed
  • AND Package Information
  • podman-3.4.4-1.1 is installed
  • OR podman-cni-config-3.4.4-1.1 is installed
  • OR podman-docker-3.4.4-1.1 is installed
  • OR podman-remote-3.4.4-1.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Micro 5.3 is installed
  • AND Package Information
  • podman-4.3.1-150400.4.11.1 is installed
  • OR podman-cni-config-4.3.1-150400.4.11.1 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Module for Containers 15 SP2 is installed
  • AND podman is not affected
  • OR Package Information
  • SUSE Linux Enterprise Module for Containers 15 SP3 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed
  • AND
  • podman is not affected
  • OR podman-cni-config is not affected
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Module for Containers 15 SP2 is installed
  • AND podman is not affected
  • OR Package Information
  • SUSE Enterprise Storage 7 is installed
  • AND
  • podman is not affected
  • OR podman-cni-config is not affected
    • Definition Synopsis
  • Release Information
  • Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure is installed
  • OR Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM is installed
  • OR Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE is installed
  • OR Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure is installed
  • OR Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM is installed
  • OR Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE is installed
  • AND libseccomp2-2.5.3-150300.10.5.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise Desktop 15 SP3 is installed
  • OR SUSE Linux Enterprise High Performance Computing 15 SP3 is installed
  • OR SUSE Linux Enterprise Module for Basesystem 15 SP3 is installed
  • OR SUSE Linux Enterprise Server 15 SP3 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed
  • OR SUSE Linux Enterprise Storage 7.1 is installed
  • OR SUSE Manager Proxy 4.2 is installed
  • OR SUSE Manager Retail Branch Server 4.2 is installed
  • OR SUSE Manager Server 4.2 is installed
  • AND
  • libcontainers-common-20210626-150300.8.3.1 is installed
  • OR libseccomp-devel-2.5.3-150300.10.5.1 is installed
  • OR libseccomp2-2.5.3-150300.10.5.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise High Performance Computing 15 SP3 is installed
  • OR SUSE Linux Enterprise Module for Containers 15 SP3 is installed
  • OR SUSE Linux Enterprise Server 15 SP3 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed
  • OR SUSE Linux Enterprise Storage 7.1 is installed
  • OR SUSE Manager Proxy 4.2 is installed
  • OR SUSE Manager Retail Branch Server 4.2 is installed
  • OR SUSE Manager Server 4.2 is installed
  • AND
  • conmon-2.0.30-150300.8.3.1 is installed
  • OR podman-3.4.4-150300.9.3.2 is installed
  • OR podman-cni-config-3.4.4-150300.9.3.2 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 15 SP3 is installed
  • OR SUSE Linux Enterprise High Performance Computing 15 SP3 is installed
  • OR SUSE Linux Enterprise Module for Basesystem 15 SP3 is installed
  • OR SUSE Linux Enterprise Server 15 SP3 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed
  • OR SUSE Linux Enterprise Storage 7.1 is installed
  • OR SUSE Manager Proxy 4.2 is installed
  • OR SUSE Manager Retail Branch Server 4.2 is installed
  • OR SUSE Manager Server 4.2 is installed
  • AND Package Information
  • libcontainers-common-20210626-150300.8.3.1 is installed
  • OR libseccomp-devel-2.5.3-150300.10.5.1 is installed
  • OR libseccomp2-2.5.3-150300.10.5.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed
  • AND Package Information
  • podman is not affected
  • OR podman-cni-config is not affected
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise High Performance Computing 15 SP2 is installed
  • OR SUSE Linux Enterprise Module for Containers 15 SP2 is installed
  • OR SUSE Linux Enterprise Server 15 SP2 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed
  • OR SUSE Linux Enterprise Storage 7 is installed
  • OR SUSE Manager Proxy 4.1 is installed
  • OR SUSE Manager Retail Branch Server 4.1 is installed
  • OR SUSE Manager Server 4.1 is installed
  • AND podman is not affected
  • OR Package Information
  • SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed
  • AND
  • podman is affected
  • OR podman-cni-config is affected
    • Definition Synopsis
  • SUSE Linux Enterprise Micro 5.0 is installed
  • AND podman is not affected
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise High Performance Computing 15 SP2 is installed
  • OR SUSE Linux Enterprise Module for Containers 15 SP2 is installed
  • OR SUSE Linux Enterprise Server 15 SP2 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed
  • OR SUSE Linux Enterprise Storage 7 is installed
  • OR SUSE Manager Proxy 4.1 is installed
  • OR SUSE Manager Retail Branch Server 4.1 is installed
  • OR SUSE Manager Server 4.1 is installed
  • AND podman is not affected
  • OR Package Information
  • SUSE Enterprise Storage 7 is installed
  • AND
  • podman is not affected
  • OR podman-cni-config is not affected
  • OR Package Information
  • SUSE Linux Enterprise Desktop 15 SP3 is installed
  • OR SUSE Linux Enterprise High Performance Computing 15 SP3 is installed
  • OR SUSE Linux Enterprise Module for Basesystem 15 SP3 is installed
  • OR SUSE Linux Enterprise Server 15 SP3 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed
  • OR SUSE Linux Enterprise Storage 7.1 is installed
  • OR SUSE Manager Proxy 4.2 is installed
  • OR SUSE Manager Retail Branch Server 4.2 is installed
  • OR SUSE Manager Server 4.2 is installed
  • AND
  • libcontainers-common-20210626-150300.8.3.1 is installed
  • OR libseccomp-devel-2.5.3-150300.10.5.1 is installed
  • OR libseccomp2-2.5.3-150300.10.5.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise High Performance Computing 15 SP3 is installed
  • OR SUSE Linux Enterprise Module for Containers 15 SP3 is installed
  • OR SUSE Linux Enterprise Server 15 SP3 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed
  • OR SUSE Linux Enterprise Storage 7.1 is installed
  • OR SUSE Manager Proxy 4.2 is installed
  • OR SUSE Manager Retail Branch Server 4.2 is installed
  • OR SUSE Manager Server 4.2 is installed
  • AND
  • conmon-2.0.30-150300.8.3.1 is installed
  • OR podman-3.4.4-150300.9.3.2 is installed
  • OR podman-cni-config-3.4.4-150300.9.3.2 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise High Performance Computing 15 SP4 is installed
  • OR SUSE Linux Enterprise Module for Containers 15 SP4 is installed
  • OR SUSE Linux Enterprise Server 15 SP4 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP4 is installed
  • OR SUSE Manager Proxy 4.3 is installed
  • OR SUSE Manager Retail Branch Server 4.3 is installed
  • OR SUSE Manager Server 4.3 is installed
  • AND Package Information
  • podman-3.4.4-150400.2.14 is installed
  • OR podman-cni-config-3.4.4-150400.2.14 is installed
  • OR podman-docker-3.4.4-150400.2.14 is installed
  • OR podman-remote-3.4.4-150400.2.14 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Micro 5.1 is installed
  • AND Package Information
  • conmon-2.0.30-150300.8.3.1 is installed
  • OR libcontainers-common-20210626-150300.8.3.1 is installed
  • OR libseccomp2-2.5.3-150300.10.5.1 is installed
  • OR podman-3.4.4-150300.9.3.2 is installed
  • OR podman-cni-config-3.4.4-150300.9.3.2 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise High Performance Computing 15 SP5 is installed
  • OR SUSE Linux Enterprise Module for Containers 15 SP5 is installed
  • OR SUSE Linux Enterprise Server 15 SP5 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP5 is installed
  • AND Package Information
  • podman-4.4.4-150500.1.4 is installed
  • OR podman-cni-config-4.4.4-150500.1.4 is installed
  • OR podman-docker-4.4.4-150500.1.4 is installed
  • OR podman-remote-4.4.4-150500.1.4 is installed
    • BACK