# CVE-2021-20199: udica: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.  Se...

CVE-2021-20199 is fixed in 28 products on 1 platform, first by RHSA-2021:1796, released May 18, 2021. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2021-20199
- Priority: Routine
- CVSS: 5.9 (Moderate)
- EPSS: 0.0116
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: May 18, 2021

## Description

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.  Security Fix(es):  * golang: crypto/ssh: crafted authentication request can lead to nil pointer dereference (CVE-2020-29652)  * podman: Remote traffic to rootless containers is seen as orginating from localhost (CVE-2021-20199)  For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  Additional Changes:  For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.4 Release Notes linked from the References section.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | buildah RHEL 8 | 0:1.19.7-1.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | buildah ol 8 | 0:1.19.7-1.0.1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | buildah-tests RHEL 8 | 0:1.19.7-1.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | buildah-tests ol 8 | 0:1.19.7-1.0.1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | cockpit-podman RHEL 8 | 0:29-2.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | cockpit-podman ol 8 | 0:29-2.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | conmon RHEL 8 | 2:2.0.26-1.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | conmon ol 8 | 2:2.0.26-1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | container-selinux RHEL 8 | 2:2.158.0-1.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | container-selinux ol 8 | 2:2.158.0-1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | containernetworking-plugins RHEL 8 | 0:0.9.1-1.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | containernetworking-plugins ol 8 | 0:0.9.1-1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | containers-common RHEL 8 | 1:1.2.2-8.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | containers-common ol 8 | 1:1.2.2-8.0.1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | crit RHEL 8 | 0:3.15-1.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | crit ol 8 | 0:3.15-1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | criu RHEL 8 | 0:3.15-1.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | criu ol 8 | 0:3.15-1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | crun RHEL 8 | 0:0.18-1.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | crun ol 8 | 0:0.18-1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | fuse-overlayfs RHEL 8 | 0:1.4.0-2.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | fuse-overlayfs ol 8 | 0:1.4.0-2.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | libslirp RHEL 8 | 0:4.3.1-1.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | libslirp ol 8 | 0:4.3.1-1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | libslirp-devel RHEL 8 | 0:4.3.1-1.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | libslirp-devel ol 8 | 0:4.3.1-1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | oci-seccomp-bpf-hook RHEL 8 | 0:1.2.0-2.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | oci-seccomp-bpf-hook ol 8 | 0:1.2.0-2.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | podman RHEL 8 | 0:3.0.1-6.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | podman RHEL 9 | 2:4.2.0-3.el9 | [RHSA-2022:7954](https://patchblox.com/security/data/fix/linux/rhsa-2022-7954.md) | Nov 15, 2022 |
| Linux | podman almalinux 9 | 2:4.2.0-3.el9 | [ALSA-2022:7954](https://patchblox.com/security/data/fix/linux/alsa-2022-7954.md) | Nov 15, 2022 |
| Linux | podman ol 8 | 0:3.0.1-6.0.1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | podman ol 9 | 2:4.2.0-3.0.1.el9 | [ELSA-2022-7954](https://patchblox.com/security/data/fix/linux/elsa-2022-7954.md) | Nov 22, 2022 |
| Linux | podman-catatonit RHEL 8 | 0:3.0.1-6.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | podman-catatonit ol 8 | 0:3.0.1-6.0.1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | podman-catatonit ol 9 | 2:4.2.0-3.0.1.el9 | [ELSA-2022-7954](https://patchblox.com/security/data/fix/linux/elsa-2022-7954.md) | Nov 22, 2022 |
| Linux | podman-docker RHEL 8 | 0:3.0.1-6.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | podman-docker RHEL 9 | 2:4.2.0-3.el9 | [RHSA-2022:7954](https://patchblox.com/security/data/fix/linux/rhsa-2022-7954.md) | Nov 15, 2022 |
| Linux | podman-docker almalinux 9 | 2:4.2.0-3.el9 | [ALSA-2022:7954](https://patchblox.com/security/data/fix/linux/alsa-2022-7954.md) | Nov 15, 2022 |
| Linux | podman-docker ol 8 | 0:3.0.1-6.0.1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | podman-docker ol 9 | 2:4.2.0-3.0.1.el9 | [ELSA-2022-7954](https://patchblox.com/security/data/fix/linux/elsa-2022-7954.md) | Nov 22, 2022 |
| Linux | podman-gvproxy RHEL 9 | 2:4.2.0-3.el9 | [RHSA-2022:7954](https://patchblox.com/security/data/fix/linux/rhsa-2022-7954.md) | Nov 15, 2022 |
| Linux | podman-gvproxy almalinux 9 | 2:4.2.0-3.el9 | [ALSA-2022:7954](https://patchblox.com/security/data/fix/linux/alsa-2022-7954.md) | Nov 15, 2022 |
| Linux | podman-gvproxy ol 9 | 2:4.2.0-3.0.1.el9 | [ELSA-2022-7954](https://patchblox.com/security/data/fix/linux/elsa-2022-7954.md) | Nov 22, 2022 |
| Linux | podman-plugins RHEL 8 | 0:3.0.1-6.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | podman-plugins RHEL 9 | 2:4.2.0-3.el9 | [RHSA-2022:7954](https://patchblox.com/security/data/fix/linux/rhsa-2022-7954.md) | Nov 15, 2022 |
| Linux | podman-plugins almalinux 9 | 2:4.2.0-3.el9 | [ALSA-2022:7954](https://patchblox.com/security/data/fix/linux/alsa-2022-7954.md) | Nov 15, 2022 |
| Linux | podman-plugins ol 8 | 0:3.0.1-6.0.1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | podman-plugins ol 9 | 2:4.2.0-3.0.1.el9 | [ELSA-2022-7954](https://patchblox.com/security/data/fix/linux/elsa-2022-7954.md) | Nov 22, 2022 |
| Linux | podman-remote RHEL 8 | 0:3.0.1-6.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | podman-remote RHEL 9 | 2:4.2.0-3.el9 | [RHSA-2022:7954](https://patchblox.com/security/data/fix/linux/rhsa-2022-7954.md) | Nov 15, 2022 |
| Linux | podman-remote almalinux 9 | 2:4.2.0-3.el9 | [ALSA-2022:7954](https://patchblox.com/security/data/fix/linux/alsa-2022-7954.md) | Nov 15, 2022 |
| Linux | podman-remote ol 8 | 0:3.0.1-6.0.1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | podman-remote ol 9 | 2:4.2.0-3.0.1.el9 | [ELSA-2022-7954](https://patchblox.com/security/data/fix/linux/elsa-2022-7954.md) | Nov 22, 2022 |
| Linux | podman-tests RHEL 8 | 0:3.0.1-6.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | podman-tests RHEL 9 | 2:4.2.0-3.el9 | [RHSA-2022:7954](https://patchblox.com/security/data/fix/linux/rhsa-2022-7954.md) | Nov 15, 2022 |
| Linux | podman-tests almalinux 9 | 2:4.2.0-3.el9 | [ALSA-2022:7954](https://patchblox.com/security/data/fix/linux/alsa-2022-7954.md) | Nov 15, 2022 |
| Linux | podman-tests ol 8 | 0:3.0.1-6.0.1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | podman-tests ol 9 | 2:4.2.0-3.0.1.el9 | [ELSA-2022-7954](https://patchblox.com/security/data/fix/linux/elsa-2022-7954.md) | Nov 22, 2022 |
| Linux | python3-criu RHEL 8 | 0:3.15-1.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | python3-criu ol 8 | 0:3.15-1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | runc RHEL 8 | 0:1.0.0-70.rc92.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | runc ol 8 | 0:1.0.0-70.rc92.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | skopeo RHEL 8 | 1:1.2.2-8.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | skopeo ol 8 | 1:1.2.2-8.0.1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | skopeo-tests RHEL 8 | 1:1.2.2-8.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | skopeo-tests ol 8 | 1:1.2.2-8.0.1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | slirp4netns RHEL 8 | 0:1.1.8-1.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | slirp4netns ol 8 | 0:1.1.8-1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | toolbox RHEL 8 | 0:0.0.8-1.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | udica RHEL 8 | 0:0.2.4-1.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | udica ol 8 | 0:0.2.4-1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |

---

Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.