A vulnerability was found in buildah. Incorrect following of symlinks while reading .containerignore and .dockerignore results in information disclosure.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | May 15, 2025 | Dec 8, 2022 |
| Oracle_linux | — | Upgrade podman-pluginsUpgrade podmanUpgrade podman-remoteUpgrade podman-dockerUpgrade podman-tests | Nov 21, 2024 | Nov 22, 2022 |
| Redhat_linux | — | Upgrade podman-remoteUpgrade fuse-overlayfs-debugsourceUpgrade podman-gvproxyUpgrade criu-libsUpgrade runc-debuginfoUpgrade runc-debugsourceUpgrade udicaUpgrade toolbox-debuginfoUpgrade libslirp-debuginfoUpgrade buildahUpgrade slirp4netns-debuginfoUpgrade toolbox-testsUpgrade conmon-debuginfoUpgrade cockpit-podmanUpgrade libslirp-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade podman-testsUpgrade crun-debuginfoUpgrade criu-debugsourceUpgrade podman-dockerUpgrade podman-debugsourceUpgrade runcUpgrade podman-plugins-debuginfoUpgrade python3-criuUpgrade buildah-debuginfoUpgrade aardvark-dnsUpgrade slirp4netnsUpgrade buildah-testsUpgrade containernetworking-plugins-debuginfoUpgrade podman-debuginfoUpgrade critUpgrade libslirpUpgrade container-selinuxUpgrade criu-develUpgrade podman-remote-debuginfoUpgrade python3-podmanUpgrade skopeoUpgrade toolbox-debugsourceUpgrade criu-debuginfoUpgrade fuse-overlayfsUpgrade containers-commonUpgrade conmonUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade netavarkUpgrade toolboxUpgrade buildah-tests-debuginfoUpgrade skopeo-testsUpgrade libslirp-develUpgrade slirp4netns-debugsourceUpgrade conmon-debugsourceUpgrade criuUpgrade crunUpgrade crun-debugsourceUpgrade podmanUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonitUpgrade containernetworking-pluginsNo solution existsUpgrade criu-libs-debuginfoUpgrade podman-pluginsUpgrade buildah-debugsourceUpgrade podman-catatonit-debuginfo | Apr 30, 2024 | Dec 8, 2022 |
| Rocky_linux | — | Upgrade podmanUpgrade podman-remoteUpgrade podman-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-pluginsUpgrade podman-debugsourceUpgrade podman-testsUpgrade podman-plugins-debuginfo | Mar 18, 2025 | Dec 8, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub