A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to hang and result in a denial of service via OOM kill when running a malicious image using an automatically assigned user namespace (`--userns=auto` in Podman and Buildah). The containers/storage library will read /etc/passwd inside the container, but does not properly validate if that file is a symlink, which can be used to cause the library to read an arbitrary file on the host.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libslirpUpgrade libslirp-develUpgrade cockpit-podmanUpgrade criu-libsUpgrade python3-criuUpgrade container-selinuxUpgrade podman-gvproxyUpgrade podman-testsUpgrade criu-develUpgrade slirp4netnsUpgrade containers-commonUpgrade buildah-testsUpgrade podman-dockerUpgrade conmonUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade skopeoUpgrade criuUpgrade critUpgrade podman-remoteUpgrade podmanUpgrade containernetworking-pluginsUpgrade podman-catatonitUpgrade netavarkUpgrade crunUpgrade toolboxUpgrade toolbox-testsUpgrade python3-podmanUpgrade buildahUpgrade podman-pluginsUpgrade udicaUpgrade runcUpgrade fuse-overlayfs | Nov 12, 2024 | Oct 15, 2024 |
| Alpine Linux | — | Upgrade buildahUpgrade podman | Aug 8, 2025 | Oct 15, 2024 |
| Debian | — | Upgrade golang-github-containers-storage | May 15, 2025 | Oct 15, 2024 |
| Oracle_linux | — | Upgrade critUpgrade netavarkUpgrade podman-gvproxyUpgrade buildahUpgrade fuse-overlayfsUpgrade podman-testsUpgrade udicaUpgrade criuUpgrade aardvark-dnsUpgrade conmonUpgrade podman-catatonitUpgrade runcUpgrade podman-dockerUpgrade libslirpUpgrade slirp4netnsUpgrade cockpit-podmanUpgrade buildah-testsUpgrade podman-pluginsUpgrade crunUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade python3-criuUpgrade containernetworking-pluginsUpgrade skopeo-testsUpgrade podman-remoteUpgrade python3-podmanUpgrade criu-develUpgrade container-selinuxUpgrade podmanUpgrade containers-commonUpgrade skopeoUpgrade libslirp-devel | Nov 21, 2024 | Oct 15, 2024 |
| Redhat Openshift | — | Upgrade cri-oUpgrade podman | Oct 30, 2024 | Oct 15, 2024 |
| Redhat_linux | — | No solution existsUpgrade libslirpUpgrade conmon-debugsourceUpgrade criu-debugsourceUpgrade aardvark-dnsUpgrade netavarkUpgrade python3-podmanUpgrade toolbox-debugsourceUpgrade cockpit-podmanUpgrade buildahUpgrade buildah-debuginfoUpgrade criuUpgrade conmon-debuginfoUpgrade fuse-overlayfsUpgrade skopeoUpgrade fuse-overlayfs-debuginfoUpgrade toolbox-testsUpgrade buildah-testsUpgrade podman-gvproxyUpgrade podman-catatonitUpgrade fuse-overlayfs-debugsourceUpgrade criu-debuginfoUpgrade slirp4netnsUpgrade udicaUpgrade podmanUpgrade criu-libs-debuginfoUpgrade buildah-tests-debuginfoUpgrade podman-dockerUpgrade runc-debugsourceUpgrade podman-testsUpgrade skopeo-testsUpgrade crunUpgrade runcUpgrade containers-commonUpgrade podman-pluginsUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade podman-debugsourceUpgrade conmonUpgrade podman-gvproxy-debuginfoUpgrade slirp4netns-debugsourceUpgrade slirp4netns-debuginfoUpgrade criu-libsUpgrade toolboxUpgrade runc-debuginfoUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-plugins-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade python3-criuUpgrade containernetworking-plugins-debugsourceUpgrade critUpgrade podman-debuginfoUpgrade libslirp-develUpgrade crun-debugsourceUpgrade libslirp-debuginfoUpgrade crun-debuginfoUpgrade criu-develUpgrade podman-remoteUpgrade buildah-debugsourceUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containernetworking-pluginsUpgrade toolbox-debuginfoUpgrade container-selinux | Nov 13, 2024 | Oct 15, 2024 |
| Rocky_linux | — | Upgrade crunUpgrade libslirp-debugsourceUpgrade slirp4netns-debugsourceUpgrade podman-plugins-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade python3-criuUpgrade toolbox-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade runc-debuginfoUpgrade crun-debugsourceUpgrade podman-debugsourceUpgrade criu-libsUpgrade conmonUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade libslirp-develUpgrade libslirp-debuginfoUpgrade podman-remote-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade criu-develUpgrade buildah-debugsourceUpgrade toolboxUpgrade podman-catatonit-debuginfoUpgrade skopeoUpgrade crun-debuginfoUpgrade skopeo-testsUpgrade slirp4netns-debuginfoUpgrade podman-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade conmon-debugsourceUpgrade aardvark-dnsUpgrade runc-debugsourceUpgrade podman-catatonitUpgrade critUpgrade buildahUpgrade runcUpgrade podman-debuginfoUpgrade podman-gvproxyUpgrade netavarkUpgrade criu-debuginfoUpgrade buildah-testsUpgrade slirp4netnsUpgrade podman-testsUpgrade podman-remoteUpgrade podmanUpgrade criu-debugsourceUpgrade toolbox-debugsourceUpgrade buildah-tests-debuginfoUpgrade buildah-debuginfoUpgrade conmon-debuginfoUpgrade libslirpUpgrade toolbox-testsUpgrade criuUpgrade fuse-overlayfsUpgrade criu-libs-debuginfo | Nov 20, 2024 | Oct 15, 2024 |
| Suse | — | Upgrade skopeo-fish-completionUpgrade podman-remoteUpgrade buildahUpgrade podmanshUpgrade skopeoUpgrade skopeo-zsh-completionUpgrade skopeo-bash-completionUpgrade podmanUpgrade podman-docker | Dec 31, 2024 | Oct 15, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 2, 2026 | Oct 15, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub