A path traversal flaw was found in Buildah in versions before 1.14.5. This flaw allows an attacker to trick a user into building a malicious container image hosted on an HTTP(s) server and then write files to the user's system anywhere that the user has permissions.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade containernetworking-pluginsUpgrade runcUpgrade oci-systemd-hookUpgrade critUpgrade container-selinuxUpgrade criuUpgrade python3-criuUpgrade oci-umountUpgrade python-podman-apiUpgrade udicaUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade fuse-overlayfsUpgrade toolbox | May 13, 2022 | Mar 31, 2020 |
| Alpine Linux | — | Upgrade buildah | Aug 22, 2024 | Mar 31, 2020 |
| Centos_linux | — | Upgrade skopeo-debugsourceUpgrade fuse-overlayfsUpgrade buildah-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade cockpit-podmanUpgrade toolboxUpgrade buildah-testsUpgrade oci-umountUpgrade skopeo-debuginfoUpgrade oci-umount-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade criu-debugsourceUpgrade slirp4netnsUpgrade fuse-overlayfs-debugsourceUpgrade skopeoUpgrade containers-commonUpgrade buildah-tests-debuginfoUpgrade runc-debugsourceUpgrade criu-debuginfoUpgrade buildahUpgrade buildah-debugsourceUpgrade conmonUpgrade podman-remote-debuginfoUpgrade runc-debuginfoUpgrade oci-systemd-hook-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade runcUpgrade critUpgrade python3-criuUpgrade skopeo-testsUpgrade podmanUpgrade podman-remoteUpgrade podman-testsUpgrade oci-systemd-hook-debugsourceUpgrade containernetworking-pluginsUpgrade podman-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-dockerUpgrade python-podman-apiUpgrade oci-umount-debugsourceUpgrade slirp4netns-debugsourceUpgrade oci-systemd-hookUpgrade udicaUpgrade podman-debugsourceUpgrade container-selinuxUpgrade criu | Apr 29, 2020 | Mar 31, 2020 |
| Debian | — | Upgrade golang-github-containers-buildah | Jul 30, 2024 | Mar 31, 2020 |
| Oracle_linux | — | Upgrade skopeoUpgrade python3-criuUpgrade runcUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade oci-systemd-hookUpgrade podmanUpgrade critUpgrade skopeo-testsUpgrade oci-umountUpgrade criuUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade buildahUpgrade podman-dockerUpgrade fuse-overlayfsUpgrade container-selinuxUpgrade udicaUpgrade python-podman-apiUpgrade podman-testsUpgrade buildah-testsUpgrade conmon | Oct 5, 2022 | Mar 26, 2020 |
| Redhat Openshift | — | Upgrade python-openstacksdkUpgrade pivotUpgrade coreos-installerUpgrade python-google-authUpgrade fuse-overlayfsUpgrade toolboxUpgrade postgresql-apb-roleUpgrade redhat-release-coreosUpgrade jenkinsUpgrade inotify-toolsUpgrade openshift-clientsUpgrade cri-toolsUpgrade python-sushyUpgrade dracutUpgrade machine-config-daemonUpgrade python-botocoreUpgrade grpcUpgrade jenkins-2-pluginsUpgrade apbUpgrade python-elasticsearchUpgrade ansible-runner-httpUpgrade rust-afterburnUpgrade python-cachetoolsUpgrade tiniUpgrade podmanUpgrade python-daemonUpgrade dumb-initUpgrade openshiftUpgrade python-voluptuousUpgrade apb-base-scriptsUpgrade python-dictdifferUpgrade console-login-helper-messagesUpgrade ipxeUpgrade protobufUpgrade python-certifiUpgrade python-clickUpgrade buildahUpgrade atomic-openshift-service-idlerUpgrade atomic-enterprise-service-catalogUpgrade skopeoUpgrade containernetworking-pluginsUpgrade python-pyroute2Upgrade libunwindUpgrade conmonUpgrade kibanaUpgrade openshift-ansibleUpgrade ignitionUpgrade faqUpgrade mysql-apb-roleUpgrade python-pysocksUpgrade libnftnlUpgrade python-ruamel-yamlUpgrade python-pexpectUpgrade python-string_utilsUpgrade python-kuryr-libUpgrade python-psutilUpgrade python-openshiftUpgrade rhosp-director-imagesUpgrade openstack-ironicUpgrade rhcos-toolsUpgrade runcUpgrade systemdUpgrade rpm-ostreeUpgrade nss-altfilesUpgrade python-ruamel-ordereddictUpgrade python-netaddrUpgrade thriftUpgrade python-rsaUpgrade ovn2.12Upgrade jqUpgrade ansible-asb-modulesUpgrade openstack-ironic-inspectorUpgrade python-kubernetesUpgrade iptablesUpgrade python-typingUpgrade openshift-kuryrUpgrade python-boto3Upgrade openshift-eventrouterUpgrade onigurumaUpgrade golang-github-prometheus-promuUpgrade ansible-runnerUpgrade python-lockfileUpgrade elastic-curatorUpgrade python-urllib3Upgrade ansible-kubernetes-modulesUpgrade python-s3transferUpgrade golang-scl-shimUpgrade openstack-ironic-python-agentUpgrade python-ptyprocessUpgrade ostreeUpgrade mariadb-apb-roleUpgrade python-requests-unixsocket | Dec 29, 2020 | Mar 26, 2020 |
| Redhat_linux | — | Upgrade criu-debugsourceUpgrade fuse-overlayfsUpgrade containernetworking-plugins-debugsourceUpgrade oci-systemd-hook-debuginfoUpgrade buildahUpgrade containers-commonUpgrade podman-dockerUpgrade criuUpgrade fuse-overlayfs-debuginfoUpgrade conmonUpgrade runc-debugsourceUpgrade skopeo-debugsourceUpgrade buildah-testsUpgrade criu-debuginfoUpgrade buildah-debuginfoUpgrade oci-umount-debuginfoUpgrade skopeo-debuginfoUpgrade skopeoUpgrade fuse-overlayfs-debugsourceUpgrade toolboxUpgrade oci-umountUpgrade cockpit-podmanUpgrade podmanUpgrade buildah-tests-debuginfoUpgrade critUpgrade container-selinuxUpgrade runc-debuginfoUpgrade podman-testsUpgrade python3-criuUpgrade podman-remote-debuginfoUpgrade podman-debugsourceUpgrade oci-systemd-hook-debugsourceUpgrade oci-systemd-hookUpgrade podman-remoteUpgrade skopeo-testsUpgrade slirp4netns-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-debuginfoUpgrade containernetworking-pluginsUpgrade runcUpgrade oci-umount-debugsourceUpgrade slirp4netnsUpgrade buildah-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade udicaUpgrade python-podman-api | Apr 29, 2020 | Mar 31, 2020 |
| Rocky_linux | — | Upgrade buildah-debugsourceUpgrade buildah-debuginfoUpgrade buildah-testsUpgrade critUpgrade runcUpgrade oci-systemd-hook-debuginfoUpgrade criuUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfsUpgrade criu-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade buildahUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-pluginsUpgrade oci-umountUpgrade fuse-overlayfs-debugsourceUpgrade oci-umount-debuginfoUpgrade runc-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade oci-systemd-hook-debugsourceUpgrade criu-debugsourceUpgrade slirp4netnsUpgrade slirp4netns-debugsourceUpgrade oci-umount-debugsourceUpgrade python3-criuUpgrade slirp4netns-debuginfoUpgrade runc-debugsourceUpgrade oci-systemd-hook | Mar 12, 2024 | Mar 31, 2020 |
| Suse | — | Upgrade libcontainers-commonUpgrade buildahUpgrade podman-cni-configUpgrade podman | Dec 1, 2020 | Mar 31, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub