GCVE - cpe:2.3:a:podman_project:podman:1.6.4-32.el7

Approved changes feed: RSS · Atom

cpe:2.3:a:podman_project:podman:1.6.4-32.el7_9:*:*:*:*:*:*:*

part: a version: 1.6.4-32.el7_9 update: *

Vendor	Podman Project (`54c8c1a3-6731-59ef-a0fa-9df47fc1ea1a`)
Product	Podman (`cc16317a-b04b-5e1d-84a3-032b2764ffc9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
`pkg:deb/debian/libpod`	purl2cpe	2026-06-01 10:17:36.657787
`pkg:deb/ubuntu/libpod`	purl2cpe	2026-06-01 10:17:36.657788
`pkg:github/containers/podman`	purl2cpe	2026-06-01 10:17:36.657789
`pkg:gitlab/redhat/podman`	purl2cpe	2026-06-01 10:17:36.657791
`pkg:rpm/centos/podman`	purl2cpe	2026-06-01 10:17:36.657792
`pkg:rpm/fedora/podman`	purl2cpe	2026-06-01 10:17:36.657793
`pkg:rpm/opensuse/podman`	purl2cpe	2026-06-01 10:17:36.657795
`pkg:sourceforge/podman.mirror`	purl2cpe	2026-06-01 10:17:36.657796

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-2739`	vulnerable	2026-06-08 05:43:36.093359	Details available The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-14370, which was previously fixed via RHSA-2020:5056. This issue could possibly allow an attacker to gain access to sensitive information stored in environment variables. Published: 2022-09-01T20:51:02.000Z Updated: 2024-08-03T00:46:04.095Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=2116927 https://access.redhat.com/security/cve/CVE-2022-2739	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2738`	vulnerable	2026-06-08 05:43:36.092712	Details available The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-8945, which was previously fixed via RHSA-2020:2117. This issue could possibly be used to crash or cause potential code execution in Go applications that use the Go GPGME wrapper library, under certain conditions, during GPG signature verification. Published: 2022-09-01T20:50:57.000Z Updated: 2024-08-03T00:46:04.079Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=2116923 https://access.redhat.com/security/cve/CVE-2022-2738	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.