Asymmetric denial of service In podman-desktop
Description
A flaw was found in Podman Desktop. A remote attacker can exploit an unauthenticated HTTP server, which lacks proper connection limits and timeouts, to trigger denial-of-service (DoS) conditions. This can lead to application crashes or a complete host freeze. Additionally, verbose error responses from the server may disclose sensitive information, such as internal file paths and system details, including usernames on Windows systems.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
rpm rhel10 | - | - | |
rpm rhel10 | 0:1.0.1-4.el10_1 |
Aliases
1. 2. 3.