A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the host (read/write) into the container as long as those files can be accessed by the user running Buildah.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade libslirp-develUpgrade podman-pluginsUpgrade criu-develUpgrade containers-commonUpgrade container-selinuxUpgrade python3-criuUpgrade python3-podmanUpgrade skopeo-testsUpgrade libslirpUpgrade critUpgrade toolboxUpgrade buildahUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade podman-remoteUpgrade aardvark-dnsUpgrade udicaUpgrade podman-catatonitUpgrade podmanUpgrade podman-gvproxyUpgrade netavarkUpgrade conmonUpgrade cockpit-podmanUpgrade containernetworking-pluginsUpgrade runcUpgrade toolbox-testsUpgrade crunUpgrade podman-testsUpgrade podman-dockerUpgrade criuUpgrade skopeoUpgrade slirp4netns | Oct 30, 2024 | Oct 9, 2024 |
| Alpine Linux | — | Upgrade podmanUpgrade buildah | Aug 8, 2025 | Oct 9, 2024 |
| Debian | — | Upgrade golang-github-containers-buildahNo solution exists | May 15, 2025 | Oct 9, 2024 |
| Oracle_linux | — | Upgrade container-selinuxUpgrade podman-pluginsUpgrade libslirpUpgrade libslirp-develUpgrade critUpgrade criu-libsUpgrade skopeo-testsUpgrade python3-criuUpgrade containernetworking-pluginsUpgrade crunUpgrade containers-commonUpgrade skopeoUpgrade oci-seccomp-bpf-hookUpgrade conmonUpgrade podman-testsUpgrade criu-develUpgrade runcUpgrade fuse-overlayfsUpgrade podman-gvproxyUpgrade podmanUpgrade podman-remoteUpgrade python3-podmanUpgrade netavarkUpgrade podman-dockerUpgrade cockpit-podmanUpgrade buildah-testsUpgrade slirp4netnsUpgrade criuUpgrade podman-catatonitUpgrade aardvark-dnsUpgrade buildah | Nov 11, 2024 | Oct 9, 2024 |
| Redhat Openshift | — | Upgrade podman | Nov 7, 2024 | Oct 9, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Oct 31, 2024 | Oct 9, 2024 |
| Rocky_linux | — | Upgrade crun-debuginfoUpgrade buildah-testsUpgrade criu-debuginfoUpgrade buildahUpgrade containernetworking-plugins-debuginfoUpgrade criu-develUpgrade conmon-debuginfoUpgrade libslirp-develUpgrade skopeo-testsUpgrade podman-gvproxyUpgrade libslirpUpgrade slirp4netns-debuginfoUpgrade runc-debuginfoUpgrade podman-plugins-debuginfoUpgrade python3-criuUpgrade podman-debugsourceUpgrade podman-testsUpgrade containernetworking-plugins-debugsourceUpgrade aardvark-dnsUpgrade crunUpgrade runc-debugsourceUpgrade slirp4netnsUpgrade buildah-tests-debuginfoUpgrade slirp4netns-debugsourceUpgrade criu-libsUpgrade conmonUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade skopeoUpgrade podman-pluginsUpgrade podman-gvproxy-debuginfoUpgrade runcUpgrade containernetworking-pluginsUpgrade buildah-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade critUpgrade netavarkUpgrade toolbox-testsUpgrade criu-debugsourceUpgrade toolbox-debugsourceUpgrade buildah-debugsourceUpgrade crun-debugsourceUpgrade podman-debuginfoUpgrade podman-catatonitUpgrade fuse-overlayfs-debugsourceUpgrade toolboxUpgrade toolbox-debuginfoUpgrade libslirp-debuginfoUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade conmon-debugsourceUpgrade criu-libs-debuginfoUpgrade podman-remoteUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfsUpgrade criuUpgrade containers-common | Nov 19, 2024 | Oct 9, 2024 |
| Suse | — | Upgrade buildahUpgrade govulncheck-vulndbUpgrade podmanshUpgrade podman-dockerUpgrade podmanUpgrade podman-remote | Dec 31, 2024 | Oct 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub