Oval Definition:	oval:org.opensuse.security:def:20230778
Revision Date: 2023-06-22 Version: 1 Title: CVE-2023-0778 Description: A Time-of-check Time-of-use (TOCTOU) flaw was found in podman. This issue may allow a malicious user to replace a normal file in a volume with a symlink while exporting the volume, allowing for access to arbitrary files on the host file system. Family: unix Class: vulnerability Status: Reference(s): Mitre CVE-2023-0778 SUSE CVE-2023-0778 SUSE-SU-2023:1812-1 SUSE-SU-2023:1814-1 Platform(s): SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 Product(s): Definition Synopsis SUSE Linux Enterprise Micro 5.4 is installed AND Package Information podman-4.4.4-150400.4.16.1 is installed OR podman-cni-config-4.4.4-150400.4.16.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise High Performance Computing 15 SP5 is installed OR SUSE Linux Enterprise Module for Containers 15 SP5 is installed OR SUSE Linux Enterprise Server 15 SP5 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP5 is installed AND Package Information podman-4.4.4-150500.1.4 is installed OR podman-cni-config-4.4.4-150500.1.4 is installed OR podman-docker-4.4.4-150500.1.4 is installed OR podman-remote-4.4.4-150500.1.4 is installed
BACK