CVE-2021-20199: Origin Validation Error

February 2, 2021 (updated February 26, 2021)

Rootless containers run with Podman, receive all traffic with a source IP address of (including from remote hosts). This impacts containerized applications that trust localhost (127.0.01) connections by default and do not require authentication. This issue affects Podman onwards.

References

bugzilla.redhat.com/show_bug.cgi?id=1919050
nvd.nist.gov/vuln/detail/CVE-2021-20199

Code Behaviors & Features

Detect and mitigate CVE-2021-20199 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →