漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
A flaw was found in podman. The `podman machine` function (used to create and manage Podman virtual machine containing a Podman process) spawns a `gvproxy` process on the host system. The `gvproxy` API is accessible on port 7777 on all IP addresses on the host. If that port is open on the host's firewall, an attacker can potentially use the `gvproxy` API to forward ports on the host to ports in the VM, making private services on the VM accessible to the network. This issue could be also used to interrupt the host's services by forwarding all ports to the VM.
CVSS Information
N/A
Vulnerability Type
信息暴露
Vulnerability Title
Podman 访问控制错误漏洞
Vulnerability Description
Podman是一款用于在Linux系统上开发、管理和运行OCI容器的引擎。 podman 存在访问控制错误漏洞，podman machine 函数（用于创建和管理包含 Podman 进程的 Podman 虚拟机）在主机系统上生成一个 gvproxy 进程。gvproxy API 可在主机上所有 IP 地址的端口 7777 上访问。如果该端口在主机的防火墙上打开，攻击者可能会使用 gvproxy API 将主机上的端口转发到 VM 中的端口，从而使网络可以访问 VM 上的私有服务。
CVSS Information
N/A
Vulnerability Type
N/A