CVE-2024-11218: A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a…

PriorityP344high8.6CVSS 3.1

AVLACLPRNUIRSCCHIHAH

EPSS

0.36%

28.0th percentile

A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and directories on the host.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
debian	golang-github-containers-buildah	< golang-github-containers-buildah 1.38.1+ds1-1 (forky)	golang-github-containers-buildah 1.38.1+ds1-1 (forky)
github.com	containers_buildah	>= 0 < 1.33.12	1.33.12
github.com	containers_buildah	>= 1.35.0 < 1.35.5	1.35.5
github.com	containers_buildah	>= 1.37.0 < 1.37.6	1.37.6
github.com	containers_buildah	>= 1.38.0 < 1.38.1	1.38.1

CVSS provenance

nvdv3.18.6HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

osv8.6HIGH

vendor_debian8.6HIGH

vendor_redhat8.6HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.