[Git][security-tracker-team/security-tracker][master] CVE-2019-25067/podman undetermined

[Neil Williams (@codehelp)]

Neil Williams pushed to branch master at Debian Security Tracker / security-tracker


Commits:
795f83ad by Neil Williams at 2022-06-11T13:45:06+01:00
CVE-2019-25067/podman undetermined

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1623,7 +1623,12 @@ CVE-2019-25069 (A vulnerability, which was classified as problematic, has been f
 CVE-2019-25068 (A vulnerability classified as critical was found in Axios Italia Axios ...)
 	NOT-FOR-US: Axios Italia Axios RE
 CVE-2019-25067 (A vulnerability, which was classified as critical, was found in Podman ...)
-	TODO: check
+	- podman <undetermined>
+	NOTE: https://vuldb.com/?id.143949
+	NOTE: https://www.exploit-db.com/exploits/47500
+	NOTE: exploit demo script on client uses Python podman code which is not in Debian
+	NOTE: refers to old versions of remote code which were never uploaded to Debian
+	NOTE: unclear if the issue was ever reported upstream, could be Fedora/RedHat specific
 CVE-2019-25066 (A vulnerability has been found in ajenti 2.1.31 and classified as crit ...)
 	- ajenti <itp> (bug #792019)
 CVE-2019-25065 (A vulnerability was found in OpenNetAdmin 18.1.1. It has been rated as ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/795f83ad72599f69bbe743ef55b4ccc546304dda

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/795f83ad72599f69bbe743ef55b4ccc546304dda
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220611/ece56fb1/attachment.htm>