CVE-2024-9675

CWE-22 — Path Traversal9 documents7 sources
Severity
4.4MEDIUM
EPSS
0.1%
top 66.04%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
14
Github.com Containers/buildahRedhat Enterprise LinuxRedhat Enterprise Linux EUS+11 more
Timeline
PublishedOct 9
Latest updateOct 11

Description

A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the host (read/write) into the container as long as those files can be accessed by the user running Buildah.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages3 packages

▶Debiangolang-github-containers-buildah< 1.37.4+ds1-1+1

Also affects: Openshift Container Platform 4.13, 4.14, 4.15, 4.16, 4.17, Enterprise Linux 8.0, 9.0, 8.8, 9.2, 9.4, 8.6

🔴Vulnerability Details

5
OSV
Buildah allows arbitrary directory mount in github.com/containers/buildah↗2024-10-11
▶
OSV
CVE-2024-9675: A vulnerability was found in Buildah↗2024-10-09
▶
GHSA
Buildah allows arbitrary directory mount↗2024-10-09
▶
OSV
Buildah allows arbitrary directory mount↗2024-10-09
▶
CVEList
Buildah: buildah allows arbitrary directory mount↗2024-10-09
▶

📋Vendor Advisories

3
Red Hat
buildah: Buildah allows arbitrary directory mount↗2024-10-09
▶
Microsoft
Buildah: buildah allows arbitrary directory mount↗2024-10-08
▶
Debian
CVE-2024-9675: golang-github-containers-buildah - A vulnerability was found in Buildah. Cache mounts do not properly validate that...↗2024
▶