A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the host (read/write) into the container as long as those files can be accessed by the user running Buildah.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-criuUpgrade libslirpUpgrade oci-seccomp-bpf-hookUpgrade criu-develUpgrade containers-commonUpgrade python3-podmanUpgrade libslirp-develUpgrade skopeo-testsUpgrade container-selinuxUpgrade podman-pluginsUpgrade criu-libsUpgrade buildah-testsUpgrade critUpgrade aardvark-dnsUpgrade podman-gvproxyUpgrade netavarkUpgrade crunUpgrade podmanUpgrade podman-catatonitUpgrade containernetworking-pluginsUpgrade fuse-overlayfsUpgrade cockpit-podmanUpgrade buildahUpgrade udicaUpgrade podman-remoteUpgrade podman-dockerUpgrade criuUpgrade podman-testsUpgrade conmonUpgrade toolbox-testsUpgrade toolboxUpgrade slirp4netnsUpgrade skopeoUpgrade runc | Oct 30, 2024 | Oct 9, 2024 |
| Alpine Linux | — | Upgrade podmanUpgrade buildah | Aug 8, 2025 | Oct 9, 2024 |
| Debian | — | Upgrade golang-github-containers-buildah | May 15, 2025 | Oct 9, 2024 |
| Oracle_linux | — | Upgrade aardvark-dnsUpgrade podman-remoteUpgrade python3-podmanUpgrade slirp4netnsUpgrade podman-catatonitUpgrade criuUpgrade netavarkUpgrade buildah-testsUpgrade cockpit-podmanUpgrade podman-dockerUpgrade buildahUpgrade fuse-overlayfsUpgrade podmanUpgrade podman-gvproxyUpgrade critUpgrade skopeo-testsUpgrade containers-commonUpgrade runcUpgrade libslirp-develUpgrade libslirpUpgrade skopeoUpgrade podman-testsUpgrade criu-develUpgrade conmonUpgrade container-selinuxUpgrade criu-libsUpgrade python3-criuUpgrade podman-pluginsUpgrade crunUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hook | Nov 11, 2024 | Oct 9, 2024 |
| Redhat Openshift | — | Upgrade podman | Nov 7, 2024 | Oct 9, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Oct 31, 2024 | Oct 9, 2024 |
| Rocky_linux | — | Upgrade netavarkUpgrade criu-debugsourceUpgrade podman-catatonitUpgrade podman-debuginfoUpgrade crun-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade runcUpgrade buildah-debugsourceUpgrade criu-libs-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-remote-debuginfoUpgrade libslirp-debuginfoUpgrade toolbox-debuginfoUpgrade podmanUpgrade podman-catatonit-debuginfoUpgrade skopeoUpgrade fuse-overlayfs-debugsourceUpgrade toolboxUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containernetworking-pluginsUpgrade toolbox-testsUpgrade buildah-debuginfoUpgrade podman-remoteUpgrade toolbox-debugsourceUpgrade containers-commonUpgrade critUpgrade criuUpgrade conmon-debugsourceUpgrade fuse-overlayfsUpgrade fuse-overlayfs-debuginfoUpgrade crun-debuginfoUpgrade buildah-testsUpgrade buildahUpgrade crunUpgrade buildah-tests-debuginfoUpgrade runc-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-gvproxyUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade conmon-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-debugsourceUpgrade libslirpUpgrade skopeo-testsUpgrade python3-criuUpgrade podman-testsUpgrade runc-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade criu-debuginfoUpgrade conmonUpgrade criu-libsUpgrade aardvark-dnsUpgrade slirp4netnsUpgrade criu-develUpgrade libslirp-debugsource | Nov 19, 2024 | Oct 9, 2024 |
| Suse | — | Upgrade podman-remoteUpgrade podman-dockerUpgrade podmanUpgrade podmanshUpgrade buildahUpgrade govulncheck-vulndb | Dec 31, 2024 | Oct 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub