A path traversal flaw was found in Buildah in versions before 1.14.5. This flaw allows an attacker to trick a user into building a malicious container image hosted on an HTTP(s) server and then write files to the user's system anywhere that the user has permissions.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade oci-umountUpgrade python3-criuUpgrade container-selinuxUpgrade containernetworking-pluginsUpgrade criuUpgrade critUpgrade oci-systemd-hookUpgrade runcUpgrade cockpit-podmanUpgrade python-podman-apiUpgrade fuse-overlayfsUpgrade slirp4netnsUpgrade toolboxUpgrade udica | May 13, 2022 | Mar 31, 2020 |
| Alpine Linux | — | Upgrade buildah | Aug 22, 2024 | Mar 31, 2020 |
| Centos_linux | — | Upgrade skopeoUpgrade containers-commonUpgrade skopeo-debugsourceUpgrade cockpit-podmanUpgrade buildah-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade skopeo-debuginfoUpgrade toolboxUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfsUpgrade criu-debuginfoUpgrade runc-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade criu-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade slirp4netnsUpgrade oci-umountUpgrade runc-debugsourceUpgrade buildah-debugsourceUpgrade buildah-testsUpgrade conmonUpgrade oci-umount-debuginfoUpgrade buildahUpgrade podman-remote-debuginfoUpgrade podman-debuginfoUpgrade slirp4netns-debuginfoUpgrade containernetworking-pluginsUpgrade python-podman-apiUpgrade podman-dockerUpgrade runcUpgrade oci-systemd-hook-debuginfoUpgrade python3-criuUpgrade podmanUpgrade containernetworking-plugins-debuginfoUpgrade critUpgrade podman-debugsourceUpgrade oci-umount-debugsourceUpgrade criuUpgrade udicaUpgrade container-selinuxUpgrade oci-systemd-hookUpgrade oci-systemd-hook-debugsourceUpgrade slirp4netns-debugsourceUpgrade podman-testsUpgrade podman-remoteUpgrade skopeo-tests | Apr 29, 2020 | Mar 31, 2020 |
| Debian | — | Upgrade golang-github-containers-buildah | Jul 30, 2024 | Mar 31, 2020 |
| Oracle_linux | — | Upgrade containernetworking-pluginsUpgrade containers-commonUpgrade criuUpgrade oci-umountUpgrade podmanUpgrade skopeo-testsUpgrade critUpgrade oci-systemd-hookUpgrade runcUpgrade python3-criuUpgrade skopeoUpgrade podman-remoteUpgrade podman-dockerUpgrade podman-testsUpgrade fuse-overlayfsUpgrade udicaUpgrade python-podman-apiUpgrade container-selinuxUpgrade buildahUpgrade cockpit-podmanUpgrade conmonUpgrade buildah-testsUpgrade slirp4netns | Oct 5, 2022 | Mar 26, 2020 |
| Redhat Openshift | — | Upgrade openshift-clientsUpgrade ipxeUpgrade openshiftUpgrade atomic-openshift-service-idlerUpgrade machine-config-daemonUpgrade postgresql-apb-roleUpgrade fuse-overlayfsUpgrade apbUpgrade python-clickUpgrade python-daemonUpgrade inotify-toolsUpgrade jenkinsUpgrade python-sushyUpgrade tiniUpgrade protobufUpgrade python-elasticsearchUpgrade conmonUpgrade python-voluptuousUpgrade python-google-authUpgrade python-cachetoolsUpgrade skopeoUpgrade pivotUpgrade mysql-apb-roleUpgrade redhat-release-coreosUpgrade ansible-runner-httpUpgrade python-dictdifferUpgrade toolboxUpgrade python-pyroute2Upgrade ignitionUpgrade python-botocoreUpgrade faqUpgrade rust-afterburnUpgrade dracutUpgrade python-certifiUpgrade openshift-ansibleUpgrade coreos-installerUpgrade buildahUpgrade jenkins-2-pluginsUpgrade kibanaUpgrade grpcUpgrade cri-toolsUpgrade atomic-enterprise-service-catalogUpgrade containernetworking-pluginsUpgrade dumb-initUpgrade podmanUpgrade python-pysocksUpgrade apb-base-scriptsUpgrade libunwindUpgrade python-openstacksdkUpgrade console-login-helper-messagesUpgrade python-s3transferUpgrade ansible-runnerUpgrade openstack-ironic-inspectorUpgrade python-string_utilsUpgrade systemdUpgrade python-ptyprocessUpgrade ansible-asb-modulesUpgrade python-openshiftUpgrade python-rsaUpgrade openstack-ironic-python-agentUpgrade onigurumaUpgrade python-boto3Upgrade thriftUpgrade python-netaddrUpgrade openshift-eventrouterUpgrade golang-github-prometheus-promuUpgrade rhosp-director-imagesUpgrade python-kubernetesUpgrade python-requests-unixsocketUpgrade rhcos-toolsUpgrade python-pexpectUpgrade iptablesUpgrade python-ruamel-yamlUpgrade runcUpgrade python-typingUpgrade ansible-kubernetes-modulesUpgrade rpm-ostreeUpgrade python-urllib3Upgrade nss-altfilesUpgrade openshift-kuryrUpgrade ostreeUpgrade mariadb-apb-roleUpgrade golang-scl-shimUpgrade python-lockfileUpgrade openstack-ironicUpgrade elastic-curatorUpgrade python-ruamel-ordereddictUpgrade jqUpgrade ovn2.12Upgrade libnftnlUpgrade python-kuryr-libUpgrade python-psutil | Dec 29, 2020 | Mar 26, 2020 |
| Redhat_linux | — | Upgrade podman-remote-debuginfoUpgrade runcUpgrade critUpgrade udicaUpgrade python-podman-apiUpgrade containernetworking-plugins-debuginfoUpgrade buildah-debugsourceUpgrade podman-debugsourceUpgrade podman-testsUpgrade runc-debuginfoUpgrade podman-debuginfoUpgrade slirp4netns-debugsourceUpgrade containernetworking-pluginsUpgrade oci-systemd-hookUpgrade oci-systemd-hook-debugsourceUpgrade slirp4netnsUpgrade skopeo-testsUpgrade oci-umount-debugsourceUpgrade podman-remoteUpgrade python3-criuUpgrade container-selinuxUpgrade slirp4netns-debuginfoUpgrade conmonUpgrade criuUpgrade cockpit-podmanUpgrade skopeo-debugsourceUpgrade buildah-tests-debuginfoUpgrade podmanUpgrade criu-debugsourceUpgrade skopeoUpgrade buildahUpgrade containers-commonUpgrade fuse-overlayfsUpgrade buildah-debuginfoUpgrade oci-systemd-hook-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podman-dockerUpgrade oci-umountUpgrade runc-debugsourceUpgrade criu-debuginfoUpgrade toolboxUpgrade buildah-testsUpgrade fuse-overlayfs-debugsourceUpgrade oci-umount-debuginfoUpgrade skopeo-debuginfoUpgrade fuse-overlayfs-debuginfo | Apr 29, 2020 | Mar 31, 2020 |
| Rocky_linux | — | Upgrade oci-umount-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade python3-criuUpgrade oci-systemd-hook-debugsourceUpgrade oci-umount-debuginfoUpgrade slirp4netns-debuginfoUpgrade slirp4netnsUpgrade runc-debugsourceUpgrade oci-systemd-hookUpgrade runc-debuginfoUpgrade criu-debugsourceUpgrade slirp4netns-debugsourceUpgrade criu-debuginfoUpgrade buildah-tests-debuginfoUpgrade runcUpgrade buildahUpgrade critUpgrade oci-systemd-hook-debuginfoUpgrade criuUpgrade fuse-overlayfsUpgrade containernetworking-plugins-debugsourceUpgrade buildah-debugsourceUpgrade buildah-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade oci-umountUpgrade fuse-overlayfs-debuginfoUpgrade buildah-testsUpgrade containernetworking-plugins | Mar 12, 2024 | Mar 31, 2020 |
| Suse | — | Upgrade podman-cni-configUpgrade podmanUpgrade buildahUpgrade libcontainers-common | Dec 1, 2020 | Mar 31, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub