A vulnerability was found in buildah. Incorrect following of symlinks while reading .containerignore and .dockerignore results in information disclosure.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | May 15, 2025 | Dec 8, 2022 |
| Oracle_linux | — | Upgrade podman-testsUpgrade podman-dockerUpgrade podman-pluginsUpgrade podman-remoteUpgrade podman | Nov 21, 2024 | Nov 22, 2022 |
| Redhat_linux | — | Upgrade podman-remoteUpgrade slirp4netns-debuginfoUpgrade podman-debuginfoUpgrade podman-debugsourceUpgrade runc-debugsourceUpgrade podman-plugins-debuginfoUpgrade runc-debuginfoUpgrade critUpgrade podman-dockerUpgrade podman-gvproxyUpgrade udicaUpgrade buildahUpgrade libslirp-debuginfoUpgrade podman-testsUpgrade podman-gvproxy-debuginfoUpgrade buildah-debuginfoUpgrade slirp4netnsUpgrade python3-criuUpgrade aardvark-dnsUpgrade criu-debugsourceUpgrade container-selinuxUpgrade toolbox-debuginfoUpgrade conmon-debuginfoUpgrade libslirpUpgrade crun-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade buildah-testsUpgrade libslirp-debugsourceUpgrade runcUpgrade containernetworking-plugins-debuginfoUpgrade toolbox-testsUpgrade cockpit-podmanUpgrade criu-libsUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfsUpgrade podmanUpgrade criu-libs-debuginfoNo solution existsUpgrade criu-develUpgrade podman-remote-debuginfoUpgrade criu-debuginfoUpgrade crunUpgrade skopeo-testsUpgrade libslirp-develUpgrade slirp4netns-debugsourceUpgrade podman-pluginsUpgrade criuUpgrade conmon-debugsourceUpgrade skopeoUpgrade buildah-tests-debuginfoUpgrade podman-catatonit-debuginfoUpgrade toolbox-debugsourceUpgrade crun-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonitUpgrade conmonUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade toolboxUpgrade buildah-debugsourceUpgrade python3-podmanUpgrade netavarkUpgrade oci-seccomp-bpf-hook-debugsource | Apr 30, 2024 | Dec 8, 2022 |
| Rocky_linux | — | Upgrade podmanUpgrade podman-remote-debuginfoUpgrade podman-remoteUpgrade podman-debuginfoUpgrade podman-pluginsUpgrade podman-testsUpgrade podman-plugins-debuginfoUpgrade podman-debugsource | Mar 18, 2025 | Dec 8, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub