A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the host (read/write) into the container as long as those files can be accessed by the user running Buildah.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade criu-develUpgrade skopeo-testsUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade libslirpUpgrade libslirp-develUpgrade container-selinuxUpgrade podman-pluginsUpgrade criu-libsUpgrade python3-criuUpgrade python3-podmanUpgrade buildah-testsUpgrade podman-gvproxyUpgrade udicaUpgrade critUpgrade podmanUpgrade podman-catatonitUpgrade cockpit-podmanUpgrade toolboxUpgrade runcUpgrade conmonUpgrade podman-remoteUpgrade podman-dockerUpgrade toolbox-testsUpgrade slirp4netnsUpgrade crunUpgrade netavarkUpgrade skopeoUpgrade criuUpgrade aardvark-dnsUpgrade podman-testsUpgrade buildahUpgrade fuse-overlayfsUpgrade containernetworking-plugins | Oct 30, 2024 | Oct 9, 2024 |
| Alpine Linux | — | Upgrade podmanUpgrade buildah | Aug 8, 2025 | Oct 9, 2024 |
| Debian | — | Upgrade golang-github-containers-buildahNo solution exists | May 15, 2025 | Oct 9, 2024 |
| Oracle_linux | — | Upgrade netavarkUpgrade podman-gvproxyUpgrade criuUpgrade slirp4netnsUpgrade aardvark-dnsUpgrade podman-remoteUpgrade podmanUpgrade python3-podmanUpgrade buildah-testsUpgrade cockpit-podmanUpgrade podman-dockerUpgrade fuse-overlayfsUpgrade buildahUpgrade podman-catatonitUpgrade containers-commonUpgrade criu-develUpgrade conmonUpgrade criu-libsUpgrade podman-pluginsUpgrade crunUpgrade oci-seccomp-bpf-hookUpgrade container-selinuxUpgrade python3-criuUpgrade libslirp-develUpgrade libslirpUpgrade runcUpgrade skopeo-testsUpgrade critUpgrade containernetworking-pluginsUpgrade skopeoUpgrade podman-tests | Nov 11, 2024 | Oct 9, 2024 |
| Redhat Openshift | — | Upgrade podman | Nov 7, 2024 | Oct 9, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Oct 31, 2024 | Oct 9, 2024 |
| Rocky_linux | — | Upgrade conmon-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade criu-libsUpgrade buildahUpgrade containernetworking-plugins-debugsourceUpgrade podman-gvproxyUpgrade criu-debuginfoUpgrade conmonUpgrade containernetworking-plugins-debuginfoUpgrade podman-plugins-debuginfoUpgrade buildah-tests-debuginfoUpgrade libslirp-debugsourceUpgrade crun-debuginfoUpgrade buildah-testsUpgrade slirp4netns-debugsourceUpgrade podman-testsUpgrade python3-criuUpgrade crunUpgrade aardvark-dnsUpgrade criu-develUpgrade libslirpUpgrade slirp4netnsUpgrade skopeo-testsUpgrade runc-debuginfoUpgrade podman-debugsourceUpgrade slirp4netns-debuginfoUpgrade runc-debugsourceUpgrade toolbox-debugsourceUpgrade podman-remoteUpgrade skopeoUpgrade conmon-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade netavarkUpgrade toolbox-testsUpgrade containernetworking-pluginsUpgrade buildah-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfsUpgrade containers-commonUpgrade criuUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-debuginfoUpgrade podman-pluginsUpgrade podman-gvproxy-debuginfoUpgrade podman-debuginfoUpgrade podman-catatonitUpgrade crun-debugsourceUpgrade runcUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade toolbox-debuginfoUpgrade toolboxUpgrade podmanUpgrade buildah-debugsourceUpgrade criu-libs-debuginfoUpgrade criu-debugsourceUpgrade crit | Nov 19, 2024 | Oct 9, 2024 |
| Suse | — | Upgrade podmanshUpgrade buildahUpgrade govulncheck-vulndbUpgrade podman-remoteUpgrade podman-dockerUpgrade podman | Dec 31, 2024 | Oct 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub