A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the host (read/write) into the container as long as those files can be accessed by the user running Buildah.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libslirpUpgrade skopeo-testsUpgrade containers-commonUpgrade podman-pluginsUpgrade criu-develUpgrade container-selinuxUpgrade criu-libsUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade python3-podmanUpgrade python3-criuUpgrade fuse-overlayfsUpgrade critUpgrade podman-catatonitUpgrade podman-remoteUpgrade netavarkUpgrade podman-gvproxyUpgrade toolboxUpgrade buildah-testsUpgrade conmonUpgrade podman-dockerUpgrade podmanUpgrade cockpit-podmanUpgrade crunUpgrade containernetworking-pluginsUpgrade runcUpgrade aardvark-dnsUpgrade skopeoUpgrade criuUpgrade podman-testsUpgrade udicaUpgrade buildahUpgrade slirp4netnsUpgrade toolbox-tests | Oct 30, 2024 | Oct 9, 2024 |
| Alpine Linux | — | Upgrade buildahUpgrade podman | Aug 8, 2025 | Oct 9, 2024 |
| Debian | — | Upgrade golang-github-containers-buildah | May 15, 2025 | Oct 9, 2024 |
| Oracle_linux | — | Upgrade podman-testsUpgrade criu-develUpgrade conmonUpgrade skopeoUpgrade critUpgrade libslirpUpgrade runcUpgrade libslirp-develUpgrade containernetworking-pluginsUpgrade crunUpgrade podman-pluginsUpgrade containers-commonUpgrade criu-libsUpgrade container-selinuxUpgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade python3-criuUpgrade buildah-testsUpgrade podman-dockerUpgrade podman-gvproxyUpgrade fuse-overlayfsUpgrade buildahUpgrade podman-remoteUpgrade python3-podmanUpgrade slirp4netnsUpgrade podman-catatonitUpgrade netavarkUpgrade criuUpgrade aardvark-dnsUpgrade cockpit-podmanUpgrade podman | Nov 11, 2024 | Oct 9, 2024 |
| Redhat Openshift | — | Upgrade podman | Nov 7, 2024 | Oct 9, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Oct 31, 2024 | Oct 9, 2024 |
| Rocky_linux | — | Upgrade podman-plugins-debuginfoUpgrade aardvark-dnsUpgrade podman-gvproxyUpgrade libslirp-develUpgrade slirp4netns-debuginfoUpgrade runc-debuginfoUpgrade buildah-testsUpgrade buildah-tests-debuginfoUpgrade libslirp-debugsourceUpgrade crun-debuginfoUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade conmon-debuginfoUpgrade crunUpgrade criu-develUpgrade libslirpUpgrade podman-debugsourceUpgrade runc-debugsourceUpgrade podman-testsUpgrade python3-criuUpgrade containernetworking-plugins-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade conmonUpgrade criu-debuginfoUpgrade slirp4netnsUpgrade criu-libsUpgrade buildahUpgrade skopeo-testsUpgrade toolbox-debugsourceUpgrade critUpgrade conmon-debugsourceUpgrade skopeoUpgrade fuse-overlayfs-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade netavarkUpgrade runcUpgrade podman-pluginsUpgrade podman-gvproxy-debuginfoUpgrade crun-debugsourceUpgrade podman-catatonitUpgrade fuse-overlayfsUpgrade toolbox-debuginfoUpgrade toolboxUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade fuse-overlayfs-debugsourceUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-remote-debuginfoUpgrade libslirp-debuginfoUpgrade buildah-debuginfoUpgrade buildah-debugsourceUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade toolbox-testsUpgrade podman-remoteUpgrade criuUpgrade criu-libs-debuginfoUpgrade criu-debugsource | Nov 19, 2024 | Oct 9, 2024 |
| Suse | — | Upgrade podman-remoteUpgrade podman-dockerUpgrade podmanUpgrade govulncheck-vulndbUpgrade buildahUpgrade podmansh | Dec 31, 2024 | Oct 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub