CVE-2022-2738

State: Published
Severity: Not scored
Published: Sep 1, 2022
Updated: Aug 3, 2024
Reserved: Aug 9, 2022

Description

The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-8945, which was previously fixed via RHSA-2020:2117. This issue could possibly be used to crash or cause potential code execution in Go applications that use the Go GPGME wrapper library, under certain conditions, during GPG signature verification.

Scores

The record has no CVSS score.

Weaknesses

CWE-416

Affected Products

Product	Versions
podmann/a	podman 1.6.4-32.el7_9Affected

References

https://bugzilla.redhat.com/show_bug.cgi?id=2116923
https://access.redhat.com/security/cve/CVE-2022-2738

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.