CVE-2018-10856 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2018-10856 Interim 1 42 2025-11-05T03:30:55Z current 2021-05-30T14:12:56Z 2025-11-05T03:30:55Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2018-10856 It has been discovered that podman before version 0.6.1 does not drop capabilities when executing a container as a non-root user. This results in unnecessary privileges being granted to the container. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2018-September/004558.html E-Mail link for SUSE-SU-2018:2704-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 3.0 SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise Module for Containers 15 SP1 SUSE Linux Enterprise Module for Containers 15 SP2 SUSE Linux Enterprise Module for Containers 15 SP3 SUSE Linux Enterprise Module for Containers 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Module for Containers 15 SP2 SUSE Linux Enterprise Module for Containers 15 SP3 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP6 SUSE Linux Enterprise Module for Containers 15 SP7 SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Module for Containers 15 SP1 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Module for Containers 15 SP2 SUSE Linux Enterprise Module for Containers 15 SP3 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP6 SUSE Linux Enterprise Module for Containers 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Module for Containers 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Module for Containers 15 SP2 SUSE Linux Enterprise Module for Containers 15 SP3 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP6 SUSE Linux Enterprise Module for Containers 15 SP7 SUSE Linux Micro 6.0 SUSE Linux Micro 6.1 SUSE Linux Enterprise Module for Containers 15 SP1 SUSE Manager Proxy 4.0 SUSE Linux Enterprise Module for Containers 15 SP2 SUSE Linux Enterprise Module for Containers 15 SP3 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP1 SUSE Manager Retail Branch Server 4.0 SUSE Linux Enterprise Module for Containers 15 SP2 SUSE Linux Enterprise Module for Containers 15 SP3 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP1 SUSE Manager Server 4.0 SUSE Linux Enterprise Module for Containers 15 SP2 SUSE Linux Enterprise Module for Containers 15 SP3 SUSE Linux Enterprise Module for Containers 15 SP4 openSUSE Tumbleweed podman podman-0.8.5-3.3.1 podman-1.0.1-2.20 podman-1.8.0-4.20.1 podman-2.1.1-4.28.1 podman-3.3.1-2.1 podman-3.4.4-150300.9.3.2 podman-3.4.4-150400.2.14 podman-3.4.7-150400.4.3.1 podman-4.3.1-150400.4.11.1 podman-4.4.4-150500.1.4 podman-4.8.3-150500.3.9.1 podman-4.9.3-1.3 podman-4.9.5-150500.3.40.1 podman-5.0.3-slfo.1.1_3.1 podman-5.4.2-160000.2.2 podman-cni-config podman-cni-config-1.0.1-2.20 podman-cni-config-1.8.0-4.20.1 podman-cni-config-2.1.1-4.28.1 podman-cni-config-3.3.1-2.1 podman-cni-config-3.4.4-150300.9.3.2 podman-cni-config-3.4.4-150400.2.14 podman-cni-config-3.4.7-150400.4.3.1 podman-cni-config-4.3.1-150400.4.11.1 podman-cni-config-4.4.4-150500.1.4 podman-docker-3.3.1-2.1 podman-docker-3.4.4-150400.2.14 podman-docker-4.4.4-150500.1.4 podman-docker-4.8.3-150500.3.9.1 podman-docker-4.9.3-1.3 podman-docker-4.9.5-150500.3.40.1 podman-docker-5.0.3-slfo.1.1_3.1 podman-docker-5.4.2-160000.2.2 podman-remote-3.3.1-2.1 podman-remote-3.4.4-150400.2.14 podman-remote-4.4.4-150500.1.4 podman-remote-4.8.3-150500.3.9.1 podman-remote-4.9.3-1.3 podman-remote-4.9.5-150500.3.40.1 podman-remote-5.0.3-slfo.1.1_3.1 podman-remote-5.4.2-160000.2.2 podmansh-4.8.3-150500.3.9.1 podmansh-4.9.5-150500.3.40.1 podmansh-5.4.2-160000.2.2 podman-0.8.5-3.3.1 as a component of SUSE CaaS Platform 3.0 podman-2.1.1-4.28.1 as a component of SUSE Linux Enterprise Micro 5.0 podman-cni-config-2.1.1-4.28.1 as a component of SUSE Linux Enterprise Micro 5.0 podman-2.1.1-4.28.1 as a component of SUSE Linux Enterprise Micro 5.1 podman-cni-config-2.1.1-4.28.1 as a component of SUSE Linux Enterprise Micro 5.1 podman-3.4.4-150300.9.3.2 as a component of SUSE Linux Enterprise Micro 5.2 podman-cni-config-3.4.4-150300.9.3.2 as a component of SUSE Linux Enterprise Micro 5.2 podman-3.4.7-150400.4.3.1 as a component of SUSE Linux Enterprise Micro 5.3 podman-cni-config-3.4.7-150400.4.3.1 as a component of SUSE Linux Enterprise Micro 5.3 podman-4.3.1-150400.4.11.1 as a component of SUSE Linux Enterprise Micro 5.4 podman-cni-config-4.3.1-150400.4.11.1 as a component of SUSE Linux Enterprise Micro 5.4 podman-4.4.4-150500.1.4 as a component of SUSE Linux Enterprise Micro 5.5 podman-cni-config-4.4.4-150500.1.4 as a component of SUSE Linux Enterprise Micro 5.5 podman-docker-4.4.4-150500.1.4 as a component of SUSE Linux Enterprise Micro 5.5 podman-1.0.1-2.20 as a component of SUSE Linux Enterprise Module for Containers 15 SP1 podman-cni-config-1.0.1-2.20 as a component of SUSE Linux Enterprise Module for Containers 15 SP1 podman-1.8.0-4.20.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP2 podman-cni-config-1.8.0-4.20.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP2 podman-2.1.1-4.28.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP3 podman-cni-config-2.1.1-4.28.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP3 podman-3.4.4-150400.2.14 as a component of SUSE Linux Enterprise Module for Containers 15 SP4 podman-cni-config-3.4.4-150400.2.14 as a component of SUSE Linux Enterprise Module for Containers 15 SP4 podman-docker-3.4.4-150400.2.14 as a component of SUSE Linux Enterprise Module for Containers 15 SP4 podman-remote-3.4.4-150400.2.14 as a component of SUSE Linux Enterprise Module for Containers 15 SP4 podman-4.4.4-150500.1.4 as a component of SUSE Linux Enterprise Module for Containers 15 SP5 podman-cni-config-4.4.4-150500.1.4 as a component of SUSE Linux Enterprise Module for Containers 15 SP5 podman-docker-4.4.4-150500.1.4 as a component of SUSE Linux Enterprise Module for Containers 15 SP5 podman-remote-4.4.4-150500.1.4 as a component of SUSE Linux Enterprise Module for Containers 15 SP5 podman-4.8.3-150500.3.9.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP6 podman-docker-4.8.3-150500.3.9.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP6 podman-remote-4.8.3-150500.3.9.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP6 podmansh-4.8.3-150500.3.9.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP6 podman-4.9.5-150500.3.40.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP7 podman-docker-4.9.5-150500.3.40.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP7 podman-remote-4.9.5-150500.3.40.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP7 podmansh-4.9.5-150500.3.40.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP7 podman-5.4.2-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 podman-docker-5.4.2-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 podman-remote-5.4.2-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 podmansh-5.4.2-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 podman-4.9.3-1.3 as a component of SUSE Linux Micro 6.0 podman-docker-4.9.3-1.3 as a component of SUSE Linux Micro 6.0 podman-remote-4.9.3-1.3 as a component of SUSE Linux Micro 6.0 podman-5.0.3-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 podman-docker-5.0.3-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 podman-remote-5.0.3-slfo.1.1_3.1 as a component of SUSE Linux Micro 6.1 podman-3.3.1-2.1 as a component of openSUSE Tumbleweed podman-cni-config-3.3.1-2.1 as a component of openSUSE Tumbleweed podman-docker-3.3.1-2.1 as a component of openSUSE Tumbleweed podman-remote-3.3.1-2.1 as a component of openSUSE Tumbleweed podman as a component of SUSE CaaS Platform 4.0 podman-cni-config as a component of SUSE CaaS Platform 4.0 podman as a component of SUSE Enterprise Storage 6 podman as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS podman-cni-config as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS podman as a component of SUSE Linux Enterprise Module for Containers 15 SP2 podman-cni-config as a component of SUSE Linux Enterprise Module for Containers 15 SP2 podman as a component of SUSE Linux Enterprise Server 15 SP1-LTSS podman-cni-config as a component of SUSE Linux Enterprise Server 15 SP1-LTSS podman as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 podman as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 podman-cni-config as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 podman as a component of SUSE Manager Proxy 4.0 podman as a component of SUSE Manager Retail Branch Server 4.0 podman as a component of SUSE Manager Server 4.0 It has been discovered that podman before version 0.6.1 does not drop capabilities when executing a container as a non-root user. This results in unnecessary privileges being granted to the container. CVE-2018-10856 SUSE CaaS Platform 3.0:podman-0.8.5-3.3.1 SUSE Linux Enterprise Micro 5.0:podman-2.1.1-4.28.1 SUSE Linux Enterprise Micro 5.0:podman-cni-config-2.1.1-4.28.1 SUSE Linux Enterprise Micro 5.1:podman-2.1.1-4.28.1 SUSE Linux Enterprise Micro 5.1:podman-cni-config-2.1.1-4.28.1 SUSE Linux Enterprise Micro 5.2:podman-3.4.4-150300.9.3.2 SUSE Linux Enterprise Micro 5.2:podman-cni-config-3.4.4-150300.9.3.2 SUSE Linux Enterprise Micro 5.3:podman-3.4.7-150400.4.3.1 SUSE Linux Enterprise Micro 5.3:podman-cni-config-3.4.7-150400.4.3.1 SUSE Linux Enterprise Micro 5.4:podman-4.3.1-150400.4.11.1 SUSE Linux Enterprise Micro 5.4:podman-cni-config-4.3.1-150400.4.11.1 SUSE Linux Enterprise Micro 5.5:podman-4.4.4-150500.1.4 SUSE Linux Enterprise Micro 5.5:podman-cni-config-4.4.4-150500.1.4 SUSE Linux Enterprise Micro 5.5:podman-docker-4.4.4-150500.1.4 SUSE Linux Enterprise Module for Containers 15 SP1:podman-1.0.1-2.20 SUSE Linux Enterprise Module for Containers 15 SP1:podman-cni-config-1.0.1-2.20 SUSE Linux Enterprise Module for Containers 15 SP2:podman-1.8.0-4.20.1 SUSE Linux Enterprise Module for Containers 15 SP2:podman-cni-config-1.8.0-4.20.1 SUSE Linux Enterprise Module for Containers 15 SP3:podman-2.1.1-4.28.1 SUSE Linux Enterprise Module for Containers 15 SP3:podman-cni-config-2.1.1-4.28.1 SUSE Linux Enterprise Module for Containers 15 SP4:podman-3.4.4-150400.2.14 SUSE Linux Enterprise Module for Containers 15 SP4:podman-cni-config-3.4.4-150400.2.14 SUSE Linux Enterprise Module for Containers 15 SP4:podman-docker-3.4.4-150400.2.14 SUSE Linux Enterprise Module for Containers 15 SP4:podman-remote-3.4.4-150400.2.14 SUSE Linux Enterprise Module for Containers 15 SP5:podman-4.4.4-150500.1.4 SUSE Linux Enterprise Module for Containers 15 SP5:podman-cni-config-4.4.4-150500.1.4 SUSE Linux Enterprise Module for Containers 15 SP5:podman-docker-4.4.4-150500.1.4 SUSE Linux Enterprise Module for Containers 15 SP5:podman-remote-4.4.4-150500.1.4 SUSE Linux Enterprise Module for Containers 15 SP6:podman-4.8.3-150500.3.9.1 SUSE Linux Enterprise Module for Containers 15 SP6:podman-docker-4.8.3-150500.3.9.1 SUSE Linux Enterprise Module for Containers 15 SP6:podman-remote-4.8.3-150500.3.9.1 SUSE Linux Enterprise Module for Containers 15 SP6:podmansh-4.8.3-150500.3.9.1 SUSE Linux Enterprise Module for Containers 15 SP7:podman-4.9.5-150500.3.40.1 SUSE Linux Enterprise Module for Containers 15 SP7:podman-docker-4.9.5-150500.3.40.1 SUSE Linux Enterprise Module for Containers 15 SP7:podman-remote-4.9.5-150500.3.40.1 SUSE Linux Enterprise Module for Containers 15 SP7:podmansh-4.9.5-150500.3.40.1 SUSE Linux Enterprise Server 16.0:podman-5.4.2-160000.2.2 SUSE Linux Enterprise Server 16.0:podman-docker-5.4.2-160000.2.2 SUSE Linux Enterprise Server 16.0:podman-remote-5.4.2-160000.2.2 SUSE Linux Enterprise Server 16.0:podmansh-5.4.2-160000.2.2 SUSE Linux Micro 6.0:podman-4.9.3-1.3 SUSE Linux Micro 6.0:podman-docker-4.9.3-1.3 SUSE Linux Micro 6.0:podman-remote-4.9.3-1.3 SUSE Linux Micro 6.1:podman-5.0.3-slfo.1.1_3.1 SUSE Linux Micro 6.1:podman-docker-5.0.3-slfo.1.1_3.1 SUSE Linux Micro 6.1:podman-remote-5.0.3-slfo.1.1_3.1 openSUSE Tumbleweed:podman-3.3.1-2.1 openSUSE Tumbleweed:podman-cni-config-3.3.1-2.1 openSUSE Tumbleweed:podman-docker-3.3.1-2.1 openSUSE Tumbleweed:podman-remote-3.3.1-2.1 SUSE CaaS Platform 4.0:podman SUSE CaaS Platform 4.0:podman-cni-config SUSE Enterprise Storage 6:podman SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:podman SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:podman-cni-config SUSE Linux Enterprise Module for Containers 15 SP2:podman SUSE Linux Enterprise Module for Containers 15 SP2:podman-cni-config SUSE Linux Enterprise Server 15 SP1-LTSS:podman SUSE Linux Enterprise Server 15 SP1-LTSS:podman-cni-config SUSE Linux Enterprise Server Business Critical Linux 15 SP1:podman SUSE Linux Enterprise Server for SAP Applications 15 SP1:podman SUSE Linux Enterprise Server for SAP Applications 15 SP1:podman-cni-config SUSE Manager Proxy 4.0:podman SUSE Manager Retail Branch Server 4.0:podman SUSE Manager Server 4.0:podman moderate 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P 5.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L