A path traversal flaw was found in Buildah in versions before 1.14.5. This flaw allows an attacker to trick a user into building a malicious container image hosted on an HTTP(s) server and then write files to the user's system anywhere that the user has permissions.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade udicaUpgrade python-podman-apiUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade toolboxUpgrade fuse-overlayfsUpgrade runcUpgrade python3-criuUpgrade oci-umountUpgrade container-selinuxUpgrade critUpgrade containernetworking-pluginsUpgrade criuUpgrade oci-systemd-hook | May 13, 2022 | Mar 31, 2020 |
| Alpine Linux | — | Upgrade buildah | Aug 22, 2024 | Mar 31, 2020 |
| Centos_linux | — | Upgrade containernetworking-plugins-debugsourceUpgrade containers-commonUpgrade cockpit-podmanUpgrade runc-debugsourceUpgrade slirp4netnsUpgrade runc-debuginfoUpgrade skopeo-debuginfoUpgrade toolboxUpgrade podman-remote-debuginfoUpgrade conmonUpgrade buildah-testsUpgrade buildah-debugsourceUpgrade skopeoUpgrade buildah-debuginfoUpgrade fuse-overlayfsUpgrade skopeo-debugsourceUpgrade buildah-tests-debuginfoUpgrade oci-umount-debuginfoUpgrade criu-debugsourceUpgrade criu-debuginfoUpgrade oci-umountUpgrade fuse-overlayfs-debuginfoUpgrade buildahUpgrade fuse-overlayfs-debugsourceUpgrade oci-systemd-hook-debugsourceUpgrade oci-umount-debugsourceUpgrade podman-debugsourceUpgrade oci-systemd-hookUpgrade podman-testsUpgrade podman-dockerUpgrade slirp4netns-debugsourceUpgrade udicaUpgrade podman-debuginfoUpgrade podman-remoteUpgrade skopeo-testsUpgrade runcUpgrade podmanUpgrade oci-systemd-hook-debuginfoUpgrade python-podman-apiUpgrade containernetworking-plugins-debuginfoUpgrade containernetworking-pluginsUpgrade slirp4netns-debuginfoUpgrade container-selinuxUpgrade criuUpgrade python3-criuUpgrade crit | Apr 29, 2020 | Mar 31, 2020 |
| Debian | — | Upgrade golang-github-containers-buildah | Jul 30, 2024 | Mar 31, 2020 |
| Oracle_linux | — | Upgrade oci-systemd-hookUpgrade python3-criuUpgrade skopeoUpgrade containers-commonUpgrade runcUpgrade podman-remoteUpgrade podmanUpgrade criuUpgrade oci-umountUpgrade skopeo-testsUpgrade containernetworking-pluginsUpgrade critUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade podman-dockerUpgrade slirp4netnsUpgrade podman-testsUpgrade udicaUpgrade container-selinuxUpgrade buildahUpgrade conmonUpgrade cockpit-podmanUpgrade python-podman-api | Oct 5, 2022 | Mar 26, 2020 |
| Redhat Openshift | — | Upgrade openstack-ironic-python-agentUpgrade python-netaddrUpgrade ostreeUpgrade rpm-ostreeUpgrade ansible-kubernetes-modulesUpgrade python-kuryr-libUpgrade runcUpgrade python-openshiftUpgrade python-ptyprocessUpgrade systemdUpgrade python-string_utilsUpgrade ansible-asb-modulesUpgrade python-urllib3Upgrade python-pexpectUpgrade openstack-ironic-inspectorUpgrade golang-scl-shimUpgrade libnftnlUpgrade jqUpgrade python-rsaUpgrade nss-altfilesUpgrade python-ruamel-ordereddictUpgrade ansible-runnerUpgrade thriftUpgrade python-lockfileUpgrade golang-github-prometheus-promuUpgrade python-boto3Upgrade ovn2.12Upgrade rhcos-toolsUpgrade python-typingUpgrade openshift-kuryrUpgrade python-kubernetesUpgrade rhosp-director-imagesUpgrade elastic-curatorUpgrade openshift-eventrouterUpgrade iptablesUpgrade python-ruamel-yamlUpgrade python-psutilUpgrade python-requests-unixsocketUpgrade openstack-ironicUpgrade mariadb-apb-roleUpgrade python-s3transferUpgrade onigurumaUpgrade apbUpgrade conmonUpgrade protobufUpgrade buildahUpgrade openshift-ansibleUpgrade python-certifiUpgrade ipxeUpgrade containernetworking-pluginsUpgrade coreos-installerUpgrade dumb-initUpgrade fuse-overlayfsUpgrade console-login-helper-messagesUpgrade kibanaUpgrade grpcUpgrade openshiftUpgrade python-google-authUpgrade python-botocoreUpgrade python-sushyUpgrade redhat-release-coreosUpgrade inotify-toolsUpgrade cri-toolsUpgrade python-pyroute2Upgrade atomic-enterprise-service-catalogUpgrade python-dictdifferUpgrade machine-config-daemonUpgrade ignitionUpgrade python-clickUpgrade jenkinsUpgrade pivotUpgrade atomic-openshift-service-idlerUpgrade libunwindUpgrade openshift-clientsUpgrade toolboxUpgrade dracutUpgrade python-cachetoolsUpgrade skopeoUpgrade python-pysocksUpgrade jenkins-2-pluginsUpgrade podmanUpgrade faqUpgrade tiniUpgrade python-daemonUpgrade apb-base-scriptsUpgrade python-voluptuousUpgrade python-elasticsearchUpgrade ansible-runner-httpUpgrade python-openstacksdkUpgrade rust-afterburnUpgrade mysql-apb-roleUpgrade postgresql-apb-role | Dec 29, 2020 | Mar 26, 2020 |
| Redhat_linux | — | Upgrade containernetworking-pluginsUpgrade podman-remoteUpgrade oci-systemd-hook-debugsourceUpgrade udicaUpgrade container-selinuxUpgrade runc-debuginfoUpgrade critUpgrade oci-umount-debugsourceUpgrade slirp4netnsUpgrade slirp4netns-debugsourceUpgrade python-podman-apiUpgrade slirp4netns-debuginfoUpgrade podman-debuginfoUpgrade podman-testsUpgrade python3-criuUpgrade buildah-debugsourceUpgrade runcUpgrade containernetworking-plugins-debuginfoUpgrade oci-systemd-hookUpgrade skopeo-testsUpgrade podman-debugsourceUpgrade podman-remote-debuginfoUpgrade buildah-testsUpgrade fuse-overlayfsUpgrade skopeo-debugsourceUpgrade criuUpgrade oci-umount-debuginfoUpgrade podman-dockerUpgrade fuse-overlayfs-debugsourceUpgrade oci-umountUpgrade skopeo-debuginfoUpgrade cockpit-podmanUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade runc-debugsourceUpgrade containers-commonUpgrade buildahUpgrade containernetworking-plugins-debugsourceUpgrade buildah-debuginfoUpgrade oci-systemd-hook-debuginfoUpgrade toolboxUpgrade skopeoUpgrade criu-debugsourceUpgrade criu-debuginfoUpgrade podmanUpgrade conmon | Apr 29, 2020 | Mar 31, 2020 |
| Rocky_linux | — | Upgrade oci-umountUpgrade oci-systemd-hook-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade criu-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade buildahUpgrade containernetworking-pluginsUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfsUpgrade containernetworking-plugins-debugsourceUpgrade buildah-debugsourceUpgrade criuUpgrade buildah-testsUpgrade buildah-debuginfoUpgrade critUpgrade runcUpgrade oci-systemd-hookUpgrade oci-umount-debuginfoUpgrade oci-systemd-hook-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade criu-debugsourceUpgrade runc-debugsourceUpgrade runc-debuginfoUpgrade slirp4netns-debuginfoUpgrade oci-umount-debugsourceUpgrade slirp4netnsUpgrade python3-criuUpgrade slirp4netns-debugsource | Mar 12, 2024 | Mar 31, 2020 |
| Suse | — | Upgrade podmanUpgrade podman-cni-configUpgrade buildahUpgrade libcontainers-common | Dec 1, 2020 | Mar 31, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub