Vigie VulnDBEuropean-hosted Vulnerability DB
FR
Menu

Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile (buildah)

CVE-2024-11218
HIGH 8.6

At a glance

Source
NVD
EPSS
EPSS 0.36 % · percentile 30 ()
State
PUBLISHED
Published
Updated
Assigner
redhat
NVD status
Deferred

Search on…

Description

A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and directories on the host.

Weaknesses (CWE)

  • CWE-269 — Improper Privilege Management

References

Scores

VersionScoreVectorScored by
CVSS 3.1HIGH 8.6CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:Hredhat
CVSS 3.1HIGH 8.6CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:HNVD · secalert@redhat.com (Secondary)

Advisories

European references

CERT-FR advisories

Affected products

ProductVersions
buildahaffected 0 < 1.33.12 ; affected 1.35.0 < 1.35.5 ; affected 1.37.0 < 1.37.6 ; affected 1.38.0 < 1.38.1
Red Hat · Red Hat Enterprise Linux 8unaffected 8100020250124120243.afee755d < *
Red Hat · Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportunaffected 8060020250203202123.3b538bd8 < *
Red Hat · Red Hat Enterprise Linux 8.6 Telecommunications Update Serviceunaffected 8060020250203202123.3b538bd8 < *
Red Hat · Red Hat Enterprise Linux 8.6 Update Services for SAP Solutionsunaffected 8060020250203202123.3b538bd8 < *
Red Hat · Red Hat Enterprise Linux 8.8 Extended Update Supportunaffected 8080020250207173112.0f77c1b7 < *
Red Hat · Red Hat Enterprise Linux 9unaffected 4:5.2.2-13.el9_5 < *
Red Hat · Red Hat Enterprise Linux 9unaffected 2:1.37.6-1.el9_5 < *
Red Hat · Red Hat Enterprise Linux 9.0 Update Services for SAP Solutionsunaffected 2:4.2.0-6.el9_0 < *
Red Hat · Red Hat Enterprise Linux 9.0 Update Services for SAP Solutionsunaffected 1:1.26.9-1.el9_0 < *
Red Hat · Red Hat Enterprise Linux 9.2 Extended Update Supportunaffected 1:1.29.5-1.el9_2 < *
Red Hat · Red Hat Enterprise Linux 9.2 Extended Update Supportunaffected 2:4.4.1-22.el9_2 < *
Red Hat · Red Hat Enterprise Linux 9.4 Extended Update Supportunaffected 2:1.33.12-2.el9_4 < *
Red Hat · Red Hat Enterprise Linux 9.4 Extended Update Supportunaffected 4:4.9.4-17.el9_4 < *
Red Hat · Red Hat OpenShift Container Platform 4.12unaffected 412.86.202503052321-0 < *
Red Hat · Red Hat OpenShift Container Platform 4.12unaffected 3:4.2.0-13.rhaos4.12.el9 < *
Red Hat · Red Hat OpenShift Container Platform 4.13unaffected 1:1.29.5-1.rhaos4.13.el8 < *
Red Hat · Red Hat OpenShift Container Platform 4.13unaffected 3:4.4.1-16.rhaos4.13.el8 < *
Red Hat · Red Hat OpenShift Container Platform 4.13unaffected 413.92.202503112237-0 < *
Red Hat · Red Hat OpenShift Container Platform 4.14unaffected 3:4.4.1-22.rhaos4.14.el8 < *

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD