A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the host (read/write) into the container as long as those files can be accessed by the user running Buildah.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade container-selinuxUpgrade libslirpUpgrade podman-pluginsUpgrade libslirp-develUpgrade criu-develUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hookUpgrade python3-criuUpgrade python3-podmanUpgrade containers-commonUpgrade criu-libsUpgrade toolbox-testsUpgrade skopeoUpgrade podman-catatonitUpgrade crunUpgrade podman-gvproxyUpgrade podman-testsUpgrade conmonUpgrade podman-dockerUpgrade buildahUpgrade podman-remoteUpgrade critUpgrade buildah-testsUpgrade criuUpgrade aardvark-dnsUpgrade slirp4netnsUpgrade fuse-overlayfsUpgrade toolboxUpgrade runcUpgrade containernetworking-pluginsUpgrade cockpit-podmanUpgrade podmanUpgrade netavarkUpgrade udica | Oct 30, 2024 | Oct 9, 2024 |
| Alpine Linux | — | Upgrade buildahUpgrade podman | Aug 8, 2025 | Oct 9, 2024 |
| Debian | — | Upgrade golang-github-containers-buildah | May 15, 2025 | Oct 9, 2024 |
| Oracle_linux | — | Upgrade podman-catatonitUpgrade podmanUpgrade cockpit-podmanUpgrade podman-gvproxyUpgrade buildahUpgrade buildah-testsUpgrade fuse-overlayfsUpgrade aardvark-dnsUpgrade podman-remoteUpgrade criuUpgrade netavarkUpgrade podman-dockerUpgrade python3-podmanUpgrade slirp4netnsUpgrade containernetworking-pluginsUpgrade runcUpgrade container-selinuxUpgrade podman-testsUpgrade conmonUpgrade criu-develUpgrade python3-criuUpgrade crunUpgrade podman-pluginsUpgrade critUpgrade libslirp-develUpgrade libslirpUpgrade skopeoUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade criu-libs | Nov 11, 2024 | Oct 9, 2024 |
| Redhat Openshift | — | Upgrade podman | Nov 7, 2024 | Oct 9, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Oct 31, 2024 | Oct 9, 2024 |
| Rocky_linux | — | Upgrade conmon-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade slirp4netns-debugsourceUpgrade aardvark-dnsUpgrade slirp4netnsUpgrade crunUpgrade criu-develUpgrade libslirpUpgrade runc-debugsourceUpgrade podman-debugsourceUpgrade podman-gvproxyUpgrade podman-plugins-debuginfoUpgrade podman-testsUpgrade skopeo-testsUpgrade libslirp-debugsourceUpgrade buildah-testsUpgrade python3-criuUpgrade buildah-tests-debuginfoUpgrade libslirp-develUpgrade crun-debuginfoUpgrade buildahUpgrade conmonUpgrade containernetworking-plugins-debuginfoUpgrade criu-libsUpgrade containernetworking-plugins-debugsourceUpgrade runc-debuginfoUpgrade slirp4netns-debuginfoUpgrade criu-debuginfoUpgrade netavarkUpgrade skopeoUpgrade toolbox-debugsourceUpgrade buildah-debugsourceUpgrade runcUpgrade podman-pluginsUpgrade podman-gvproxy-debuginfoUpgrade podman-debuginfoUpgrade podman-catatonitUpgrade crun-debugsourceUpgrade toolbox-debuginfoUpgrade toolboxUpgrade podman-catatonit-debuginfoUpgrade libslirp-debuginfoUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podmanUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfsUpgrade criuUpgrade critUpgrade criu-libs-debuginfoUpgrade criu-debugsourceUpgrade conmon-debugsourceUpgrade containernetworking-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade containers-commonUpgrade buildah-debuginfoUpgrade toolbox-testsUpgrade podman-remoteUpgrade oci-seccomp-bpf-hook-debuginfo | Nov 19, 2024 | Oct 9, 2024 |
| Suse | — | Upgrade podmanshUpgrade govulncheck-vulndbUpgrade buildahUpgrade podman-remoteUpgrade podmanUpgrade podman-docker | Dec 31, 2024 | Oct 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub