CVE-2019-18466 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2019-18466 Interim 1 38 2026-03-05T06:05:36Z current 2021-05-30T14:32:51Z 2026-03-05T06:05:36Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2019-18466 An issue was discovered in Podman in libpod before 1.6.0. It resolves a symlink in the host context during a copy operation from the container to the host, because an undesired glob operation occurs. An attacker could create a container image containing particular symlinks that, when copied by a victim user to the host filesystem, may overwrite existing files with others from the host. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2020-June/006952.html E-Mail link for SUSE-CU-2020:198-1 https://lists.suse.com/pipermail/sle-security-updates/2023-October/016759.html E-Mail link for SUSE-CU-2023:3470-1 https://lists.suse.com/pipermail/sle-security-updates/2023-October/016760.html E-Mail link for SUSE-CU-2023:3473-1 https://lists.suse.com/pipermail/sle-security-updates/2023-October/016761.html E-Mail link for SUSE-CU-2023:3475-1 https://lists.suse.com/pipermail/sle-security-updates/2020-March/006616.html E-Mail link for SUSE-SU-2020:0697-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Z66KUDZOZAEDCJTWX6CRP3A7B65JI53N/ E-Mail link for openSUSE-SU-2020:0398-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings Container caasp/v4/cilium:1.6.6 Container rancher/elemental-teal-iso/5.4:latest Container rancher/elemental-teal-rt/5.4:latest Container rancher/elemental-teal/5.4:latest Container suse/sle-micro/5.5:2.0.2-4.2.20 Image SLES15-SP5-Manager-Proxy-5-0-BYOS Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2 Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE Image SLES15-SP5-Manager-Server-5-0 Image SLES15-SP5-Manager-Server-5-0-Azure-llc Image SLES15-SP5-Manager-Server-5-0-Azure-ltd Image SLES15-SP5-Manager-Server-5-0-BYOS Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2 Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE Image SLES15-SP5-Manager-Server-5-0-EC2-llc Image SLES15-SP5-Manager-Server-5-0-EC2-ltd Image SLES15-SP5-Micro-5-5 Image SLES15-SP5-Micro-5-5-Azure Image SLES15-SP5-Micro-5-5-BYOS Image SLES15-SP5-Micro-5-5-BYOS-Azure Image SLES15-SP5-Micro-5-5-BYOS-EC2 Image SLES15-SP5-Micro-5-5-BYOS-GCE Image SLES15-SP5-Micro-5-5-EC2 Image SLES15-SP5-Micro-5-5-GCE SUSE Linux Enterprise Module for Containers 15 SP1 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Containers 15 SP2 SUSE Linux Enterprise Module for Containers 15 SP3 SUSE Liberty Linux 8 SUSE Linux Enterprise Module for Containers 15 SP1 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Containers 15 SP2 SUSE Linux Enterprise Module for Containers 15 SP3 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP6 SUSE Linux Enterprise Module for Containers 15 SP7 SUSE Linux Enterprise Module for Containers 15 SP1 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Containers 15 SP2 SUSE Linux Enterprise Module for Containers 15 SP3 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP6 SUSE Linux Enterprise Module for Containers 15 SP7 SUSE Linux Enterprise Module for Containers 15 SP1 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Containers 15 SP2 SUSE Linux Enterprise Module for Containers 15 SP3 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP6 SUSE Linux Enterprise Module for Containers 15 SP7 SUSE Linux Enterprise Module for Containers 15 SP1 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Containers 15 SP2 SUSE Linux Enterprise Module for Containers 15 SP3 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP1 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Containers 15 SP2 SUSE Linux Enterprise Module for Containers 15 SP3 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP1 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Containers 15 SP2 SUSE Linux Enterprise Module for Containers 15 SP3 SUSE Linux Enterprise Module for Containers 15 SP4 openSUSE Leap 15.1 cni-0.7.1-3.3.1 cni-0.7.1-lp151.2.3.1 cni-plugins-0.8.4-3.3.1 cni-plugins-0.8.4-lp151.2.3.1 conmon-2.0.10-3.3.1 conmon-2.0.10-lp151.2.1 container-selinux-2.123.0-2.module+el8.1.0+4900+9d7326b8 containernetworking-plugins-0.8.1-3.module+el8.1.0+4881+045289ee containers-common-0.1.37-6.module+el8.1.0+4876+e678a192 fuse-overlayfs-0.7.6-3.6.1 fuse-overlayfs-0.7.6-lp151.5.1 podman-1.4.2-6.module+el8.1.0+4830+f49150d7 podman-1.8.0-4.14.1 podman-1.8.0-lp151.3.9.1 podman-cni-config-1.8.0-4.14.1 podman-cni-config-1.8.0-lp151.3.9.1 podman-docker-1.4.2-6.module+el8.1.0+4830+f49150d7 podman-manpages-1.4.2-6.module+el8.1.0+4830+f49150d7 podman-remote-1.4.2-6.module+el8.1.0+4830+f49150d7 runc-1.0.0-61.rc8.module+el8.1.0+4873+4a24e241 skopeo-0.1.37-6.module+el8.1.0+4876+e678a192 cni-0.7.1-3.3.1 as a component of Container caasp/v4/cilium:1.6.6 cni-plugins-0.8.4-3.3.1 as a component of Container caasp/v4/cilium:1.6.6 cni-0.7.1-3.3.1 as a component of Container rancher/elemental-teal-iso/5.4:latest cni-0.7.1-3.3.1 as a component of Container rancher/elemental-teal-rt/5.4:latest cni-plugins-0.8.4-3.3.1 as a component of Container rancher/elemental-teal-rt/5.4:latest fuse-overlayfs-0.7.6-3.6.1 as a component of Container rancher/elemental-teal-rt/5.4:latest cni-0.7.1-3.3.1 as a component of Container rancher/elemental-teal/5.4:latest cni-plugins-0.8.4-3.3.1 as a component of Container rancher/elemental-teal/5.4:latest fuse-overlayfs-0.7.6-3.6.1 as a component of Container rancher/elemental-teal/5.4:latest fuse-overlayfs-0.7.6-3.6.1 as a component of Container suse/sle-micro/5.5:2.0.2-4.2.20 fuse-overlayfs-0.7.6-3.6.1 as a component of Image SLES15-SP5-Manager-Proxy-5-0-BYOS fuse-overlayfs-0.7.6-3.6.1 as a component of Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure fuse-overlayfs-0.7.6-3.6.1 as a component of Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2 fuse-overlayfs-0.7.6-3.6.1 as a component of Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE fuse-overlayfs-0.7.6-3.6.1 as a component of Image SLES15-SP5-Manager-Server-5-0 fuse-overlayfs-0.7.6-3.6.1 as a component of Image SLES15-SP5-Manager-Server-5-0-Azure-llc fuse-overlayfs-0.7.6-3.6.1 as a component of Image SLES15-SP5-Manager-Server-5-0-Azure-ltd fuse-overlayfs-0.7.6-3.6.1 as a component of Image SLES15-SP5-Manager-Server-5-0-BYOS fuse-overlayfs-0.7.6-3.6.1 as a component of Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure fuse-overlayfs-0.7.6-3.6.1 as a component of Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2 fuse-overlayfs-0.7.6-3.6.1 as a component of Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE fuse-overlayfs-0.7.6-3.6.1 as a component of Image SLES15-SP5-Manager-Server-5-0-EC2-llc fuse-overlayfs-0.7.6-3.6.1 as a component of Image SLES15-SP5-Manager-Server-5-0-EC2-ltd fuse-overlayfs-0.7.6-3.6.1 as a component of Image SLES15-SP5-Micro-5-5 fuse-overlayfs-0.7.6-3.6.1 as a component of Image SLES15-SP5-Micro-5-5-Azure fuse-overlayfs-0.7.6-3.6.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS fuse-overlayfs-0.7.6-3.6.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS-Azure fuse-overlayfs-0.7.6-3.6.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS-EC2 fuse-overlayfs-0.7.6-3.6.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS-GCE fuse-overlayfs-0.7.6-3.6.1 as a component of Image SLES15-SP5-Micro-5-5-EC2 fuse-overlayfs-0.7.6-3.6.1 as a component of Image SLES15-SP5-Micro-5-5-GCE container-selinux-2.123.0-2.module+el8.1.0+4900+9d7326b8 as a component of SUSE Liberty Linux 8 containernetworking-plugins-0.8.1-3.module+el8.1.0+4881+045289ee as a component of SUSE Liberty Linux 8 containers-common-0.1.37-6.module+el8.1.0+4876+e678a192 as a component of SUSE Liberty Linux 8 podman-1.4.2-6.module+el8.1.0+4830+f49150d7 as a component of SUSE Liberty Linux 8 podman-docker-1.4.2-6.module+el8.1.0+4830+f49150d7 as a component of SUSE Liberty Linux 8 podman-manpages-1.4.2-6.module+el8.1.0+4830+f49150d7 as a component of SUSE Liberty Linux 8 podman-remote-1.4.2-6.module+el8.1.0+4830+f49150d7 as a component of SUSE Liberty Linux 8 runc-1.0.0-61.rc8.module+el8.1.0+4873+4a24e241 as a component of SUSE Liberty Linux 8 skopeo-0.1.37-6.module+el8.1.0+4876+e678a192 as a component of SUSE Liberty Linux 8 cni-0.7.1-3.3.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP1 cni-plugins-0.8.4-3.3.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP1 conmon-2.0.10-3.3.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP1 fuse-overlayfs-0.7.6-3.6.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP1 podman-1.8.0-4.14.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP1 podman-cni-config-1.8.0-4.14.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP1 cni-0.7.1-3.3.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP2 cni-plugins-0.8.4-3.3.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP2 conmon-2.0.10-3.3.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP2 fuse-overlayfs-0.7.6-3.6.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP2 podman-1.8.0-4.14.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP2 podman-cni-config-1.8.0-4.14.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP2 cni-0.7.1-3.3.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP3 cni-plugins-0.8.4-3.3.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP3 conmon-2.0.10-3.3.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP3 fuse-overlayfs-0.7.6-3.6.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP3 podman-1.8.0-4.14.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP3 podman-cni-config-1.8.0-4.14.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP3 cni-0.7.1-3.3.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP4 cni-plugins-0.8.4-3.3.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP4 fuse-overlayfs-0.7.6-3.6.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP4 fuse-overlayfs-0.7.6-3.6.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP5 fuse-overlayfs-0.7.6-3.6.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP6 fuse-overlayfs-0.7.6-3.6.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP7 cni-0.7.1-3.3.1 as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP1 cni-plugins-0.8.4-3.3.1 as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP1 cni-0.7.1-lp151.2.3.1 as a component of openSUSE Leap 15.1 cni-plugins-0.8.4-lp151.2.3.1 as a component of openSUSE Leap 15.1 conmon-2.0.10-lp151.2.1 as a component of openSUSE Leap 15.1 fuse-overlayfs-0.7.6-lp151.5.1 as a component of openSUSE Leap 15.1 podman-1.8.0-lp151.3.9.1 as a component of openSUSE Leap 15.1 podman-cni-config-1.8.0-lp151.3.9.1 as a component of openSUSE Leap 15.1 An issue was discovered in Podman in libpod before 1.6.0. It resolves a symlink in the host context during a copy operation from the container to the host, because an undesired glob operation occurs. An attacker could create a container image containing particular symlinks that, when copied by a victim user to the host filesystem, may overwrite existing files with others from the host. CVE-2019-18466 Container caasp/v4/cilium:1.6.6:cni-0.7.1-3.3.1 Container caasp/v4/cilium:1.6.6:cni-plugins-0.8.4-3.3.1 Container rancher/elemental-teal-iso/5.4:latest:cni-0.7.1-3.3.1 Container rancher/elemental-teal-rt/5.4:latest:cni-0.7.1-3.3.1 Container rancher/elemental-teal-rt/5.4:latest:cni-plugins-0.8.4-3.3.1 Container rancher/elemental-teal-rt/5.4:latest:fuse-overlayfs-0.7.6-3.6.1 Container rancher/elemental-teal/5.4:latest:cni-0.7.1-3.3.1 Container rancher/elemental-teal/5.4:latest:cni-plugins-0.8.4-3.3.1 Container rancher/elemental-teal/5.4:latest:fuse-overlayfs-0.7.6-3.6.1 Container suse/sle-micro/5.5:2.0.2-4.2.20:fuse-overlayfs-0.7.6-3.6.1 Image SLES15-SP5-Manager-Proxy-5-0-BYOS:fuse-overlayfs-0.7.6-3.6.1 Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure:fuse-overlayfs-0.7.6-3.6.1 Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2:fuse-overlayfs-0.7.6-3.6.1 Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE:fuse-overlayfs-0.7.6-3.6.1 Image SLES15-SP5-Manager-Server-5-0:fuse-overlayfs-0.7.6-3.6.1 Image SLES15-SP5-Manager-Server-5-0-Azure-llc:fuse-overlayfs-0.7.6-3.6.1 Image SLES15-SP5-Manager-Server-5-0-Azure-ltd:fuse-overlayfs-0.7.6-3.6.1 Image SLES15-SP5-Manager-Server-5-0-BYOS:fuse-overlayfs-0.7.6-3.6.1 Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure:fuse-overlayfs-0.7.6-3.6.1 Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2:fuse-overlayfs-0.7.6-3.6.1 Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE:fuse-overlayfs-0.7.6-3.6.1 Image SLES15-SP5-Manager-Server-5-0-EC2-llc:fuse-overlayfs-0.7.6-3.6.1 Image SLES15-SP5-Manager-Server-5-0-EC2-ltd:fuse-overlayfs-0.7.6-3.6.1 Image SLES15-SP5-Micro-5-5:fuse-overlayfs-0.7.6-3.6.1 Image SLES15-SP5-Micro-5-5-Azure:fuse-overlayfs-0.7.6-3.6.1 Image SLES15-SP5-Micro-5-5-BYOS:fuse-overlayfs-0.7.6-3.6.1 Image SLES15-SP5-Micro-5-5-BYOS-Azure:fuse-overlayfs-0.7.6-3.6.1 Image SLES15-SP5-Micro-5-5-BYOS-EC2:fuse-overlayfs-0.7.6-3.6.1 Image SLES15-SP5-Micro-5-5-BYOS-GCE:fuse-overlayfs-0.7.6-3.6.1 Image SLES15-SP5-Micro-5-5-EC2:fuse-overlayfs-0.7.6-3.6.1 Image SLES15-SP5-Micro-5-5-GCE:fuse-overlayfs-0.7.6-3.6.1 SUSE Liberty Linux 8:container-selinux-2.123.0-2.module+el8.1.0+4900+9d7326b8 SUSE Liberty Linux 8:containernetworking-plugins-0.8.1-3.module+el8.1.0+4881+045289ee SUSE Liberty Linux 8:containers-common-0.1.37-6.module+el8.1.0+4876+e678a192 SUSE Liberty Linux 8:podman-1.4.2-6.module+el8.1.0+4830+f49150d7 SUSE Liberty Linux 8:podman-docker-1.4.2-6.module+el8.1.0+4830+f49150d7 SUSE Liberty Linux 8:podman-manpages-1.4.2-6.module+el8.1.0+4830+f49150d7 SUSE Liberty Linux 8:podman-remote-1.4.2-6.module+el8.1.0+4830+f49150d7 SUSE Liberty Linux 8:runc-1.0.0-61.rc8.module+el8.1.0+4873+4a24e241 SUSE Liberty Linux 8:skopeo-0.1.37-6.module+el8.1.0+4876+e678a192 SUSE Linux Enterprise Module for Containers 15 SP1:cni-0.7.1-3.3.1 SUSE Linux Enterprise Module for Containers 15 SP1:cni-plugins-0.8.4-3.3.1 SUSE Linux Enterprise Module for Containers 15 SP1:conmon-2.0.10-3.3.1 SUSE Linux Enterprise Module for Containers 15 SP1:fuse-overlayfs-0.7.6-3.6.1 SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.8.0-4.14.1 SUSE Linux Enterprise Module for Containers 15 SP1:podman-cni-config-1.8.0-4.14.1 SUSE Linux Enterprise Module for Containers 15 SP2:cni-0.7.1-3.3.1 SUSE Linux Enterprise Module for Containers 15 SP2:cni-plugins-0.8.4-3.3.1 SUSE Linux Enterprise Module for Containers 15 SP2:conmon-2.0.10-3.3.1 SUSE Linux Enterprise Module for Containers 15 SP2:fuse-overlayfs-0.7.6-3.6.1 SUSE Linux Enterprise Module for Containers 15 SP2:podman-1.8.0-4.14.1 SUSE Linux Enterprise Module for Containers 15 SP2:podman-cni-config-1.8.0-4.14.1 SUSE Linux Enterprise Module for Containers 15 SP3:cni-0.7.1-3.3.1 SUSE Linux Enterprise Module for Containers 15 SP3:cni-plugins-0.8.4-3.3.1 SUSE Linux Enterprise Module for Containers 15 SP3:conmon-2.0.10-3.3.1 SUSE Linux Enterprise Module for Containers 15 SP3:fuse-overlayfs-0.7.6-3.6.1 SUSE Linux Enterprise Module for Containers 15 SP3:podman-1.8.0-4.14.1 SUSE Linux Enterprise Module for Containers 15 SP3:podman-cni-config-1.8.0-4.14.1 SUSE Linux Enterprise Module for Containers 15 SP4:cni-0.7.1-3.3.1 SUSE Linux Enterprise Module for Containers 15 SP4:cni-plugins-0.8.4-3.3.1 SUSE Linux Enterprise Module for Containers 15 SP4:fuse-overlayfs-0.7.6-3.6.1 SUSE Linux Enterprise Module for Containers 15 SP5:fuse-overlayfs-0.7.6-3.6.1 SUSE Linux Enterprise Module for Containers 15 SP6:fuse-overlayfs-0.7.6-3.6.1 SUSE Linux Enterprise Module for Containers 15 SP7:fuse-overlayfs-0.7.6-3.6.1 SUSE Linux Enterprise Module for Public Cloud 15 SP1:cni-0.7.1-3.3.1 SUSE Linux Enterprise Module for Public Cloud 15 SP1:cni-plugins-0.8.4-3.3.1 openSUSE Leap 15.1:cni-0.7.1-lp151.2.3.1 openSUSE Leap 15.1:cni-plugins-0.8.4-lp151.2.3.1 openSUSE Leap 15.1:conmon-2.0.10-lp151.2.1 openSUSE Leap 15.1:fuse-overlayfs-0.7.6-lp151.5.1 openSUSE Leap 15.1:podman-1.8.0-lp151.3.9.1 openSUSE Leap 15.1:podman-cni-config-1.8.0-lp151.3.9.1 moderate 5.8 AV:N/AC:M/Au:N/C:N/I:P/A:P 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N