Vulnerability · Published Mar 18, 2024 · Assigned by redhat
CVE-2024-1753Buildah: buildah: container escape via improper bind mount validation
High 8.6
In plain English
A high-severity security flaw in buildah. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 40% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)8.6High
Exploit odds (30 days)0.5%top 60.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers. A malicious Containerfile can use a dummy image with a symbolic link to the root filesystem as a mount source and cause the mount operation to mount the host root filesystem inside the RUN step. The commands inside the RUN step will then have read-write access to the host filesystem, allowing for full container escape at build time.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | aardvark-dns | 2:1.0.1-38.module_el8.9.0+3627+db8ec155 | ALSA-2024:2084 |
| AlmaLinux:8 | aardvark-dns | 2:1.7.0-1.module_el8.9.0+3657+d86e192f | ALSA-2024:2098 |
| AlmaLinux:8 | aardvark-dns | 2:1.0.1-38.module_el8.9.0+3821+d7d58347 | ALSA-2024:2084 |
| AlmaLinux:8 | aardvark-dns | 2:1.10.0-1.module_el8.10.0+3792+03eaed9c | ALSA-2024:3254 |
| AlmaLinux:8 | buildah | 1:1.24.7-1.module_el8.9.0+3821+d7d58347.alma.1 | ALSA-2024:2084 |
| AlmaLinux:8 | buildah | 2:1.33.7-1.module_el8.10.0+3845+87b84552 | ALSA-2024:3254 |
| AlmaLinux:8 | buildah | 1:1.31.5-1.module_el8.9.0+3823+03810114 | ALSA-2024:2098 |
| AlmaLinux:9 | buildah | 1:1.31.5-1.el9_3 | ALSA-2024:2055 |
| AlmaLinux:8 | buildah-tests | 1:1.31.5-1.module_el8.9.0+3823+03810114 | ALSA-2024:2098 |
| AlmaLinux:8 | buildah-tests | 1:1.24.7-1.module_el8.9.0+3821+d7d58347.alma.1 | ALSA-2024:2084 |
| AlmaLinux:8 | buildah-tests | 2:1.33.7-1.module_el8.10.0+3845+87b84552 | ALSA-2024:3254 |
| AlmaLinux:9 | buildah-tests | 1:1.31.5-1.el9_3 | ALSA-2024:2055 |
| AlmaLinux:8 | cockpit-podman | 46-1.module_el8.7.0+3344+5bcd850f | ALSA-2024:2084 |
| AlmaLinux:8 | cockpit-podman | 84.1-1.module_el8.10.0+3792+03eaed9c | ALSA-2024:3254 |
| AlmaLinux:8 | cockpit-podman | 75-1.module_el8.9.0+3797+9f808d65 | ALSA-2024:2098 |
| AlmaLinux:8 | conmon | 3:2.1.8-1.module_el8.9.0+3755+bc5f21db | ALSA-2024:2098 |
| AlmaLinux:8 | conmon | 2:2.1.4-2.module_el8.9.0+3627+db8ec155 | ALSA-2024:2084 |
| AlmaLinux:8 | conmon | 3:2.1.10-1.module_el8.10.0+3845+87b84552 | ALSA-2024:3254 |
| AlmaLinux:8 | conmon | 2:2.1.4-2.module_el8.9.0+3821+d7d58347 | ALSA-2024:2084 |
| AlmaLinux:8 | container-selinux | 2:2.229.0-2.module_el8.10.0+3792+03eaed9c | ALSA-2024:3254 |
| AlmaLinux:8 | container-selinux | 2:2.229.0-1.module_el8.9.0+3755+bc5f21db | ALSA-2024:2098 |
| AlmaLinux:8 | container-selinux | 2:2.205.0-3.module_el8.9.0+3687+dcd7ef8f | ALSA-2024:2084 |
| AlmaLinux:8 | containernetworking-plugins | 1:1.4.0-2.module_el8.10.0+3792+03eaed9c | ALSA-2024:3254 |
| AlmaLinux:8 | containernetworking-plugins | 1:1.1.1-6.module_el8.9.0+3821+d7d58347 | ALSA-2024:2084 |
| AlmaLinux:8 | containernetworking-plugins | 1:1.1.1-6.module_el8.9.0+3711+04fcca5e | ALSA-2024:2084 |
| AlmaLinux:8 | containernetworking-plugins | 1:1.3.0-8.module_el8.9.0+3717+81096349 | ALSA-2024:2098 |
| AlmaLinux:8 | containers-common | 2:1-81.module_el8.10.0+3792+03eaed9c | ALSA-2024:3254 |
| AlmaLinux:8 | containers-common | 2:1-38.module_el8.9.0+3821+d7d58347 | ALSA-2024:2084 |
| AlmaLinux:8 | containers-common | 2:1-38.module_el8.9.0+3627+db8ec155 | ALSA-2024:2084 |
| AlmaLinux:8 | containers-common | 2:1-71.module_el8.9.0+3755+bc5f21db | ALSA-2024:2098 |
| AlmaLinux:8 | crit | 3.18-5.module_el8.10.0+3845+87b84552 | ALSA-2024:3254 |
| AlmaLinux:8 | crit | 3.18-4.module_el8.9.0+3755+bc5f21db | ALSA-2024:2098 |
| AlmaLinux:8 | crit | 3.15-3.module_el8.6.0+2877+8e437bf5 | ALSA-2024:2084 |
| AlmaLinux:8 | crit | 3.15-3.module_el8.6.0+3137+d33c3efb | ALSA-2024:2084 |
| AlmaLinux:8 | criu | 3.18-5.module_el8.10.0+3845+87b84552 | ALSA-2024:3254 |
| AlmaLinux:8 | criu | 3.15-3.module_el8.9.0+3821+d7d58347 | ALSA-2024:2084 |
| AlmaLinux:8 | criu | 3.15-3.module_el8.9.0+3817+215c128b | ALSA-2024:2084 |
| AlmaLinux:8 | criu | 3.18-4.module_el8.9.0+3755+bc5f21db | ALSA-2024:2098 |
| AlmaLinux:8 | criu-devel | 3.18-4.module_el8.9.0+3717+81096349 | ALSA-2024:2098 |
| AlmaLinux:8 | criu-devel | 3.15-3.module_el8.9.0+3821+d7d58347 | ALSA-2024:2084 |
| AlmaLinux:8 | criu-devel | 3.15-3.module_el8.6.0+2877+8e437bf5 | ALSA-2024:2084 |
| AlmaLinux:8 | criu-devel | 3.18-5.module_el8.10.0+3845+87b84552 | ALSA-2024:3254 |
| AlmaLinux:8 | criu-libs | 3.15-3.module_el8.9.0+3817+215c128b | ALSA-2024:2084 |
| AlmaLinux:8 | criu-libs | 3.18-5.module_el8.10.0+3845+87b84552 | ALSA-2024:3254 |
| AlmaLinux:8 | criu-libs | 3.18-4.module_el8.9.0+3643+9234dc3b | ALSA-2024:2098 |
| AlmaLinux:8 | criu-libs | 3.15-3.module_el8.9.0+3821+d7d58347 | ALSA-2024:2084 |
| AlmaLinux:8 | crun | 1.14.3-2.module_el8.10.0+3845+87b84552 | ALSA-2024:3254 |
| AlmaLinux:8 | crun | 1.8.7-1.module_el8.9.0+3643+9234dc3b | ALSA-2024:2098 |
| AlmaLinux:8 | crun | 1.8.7-1.module_el8.9.0+3683+33eb0feb | ALSA-2024:2084 |
| AlmaLinux:8 | fuse-overlayfs | 1.13-1.module_el8.10.0+3792+03eaed9c | ALSA-2024:3254 |
| AlmaLinux:8 | fuse-overlayfs | 1.12-1.module_el8.9.0+3643+9234dc3b | ALSA-2024:2098 |
| AlmaLinux:8 | fuse-overlayfs | 1.9-2.module_el8.9.0+3627+db8ec155 | ALSA-2024:2084 |
| AlmaLinux:8 | fuse-overlayfs | 1.9-2.module_el8.9.0+3821+d7d58347 | ALSA-2024:2084 |
| AlmaLinux:8 | libslirp | 4.4.0-1.module_el8.6.0+3137+d33c3efb | ALSA-2024:2084 |
| AlmaLinux:8 | libslirp | 4.4.0-1.module_el8.9.0+3821+d7d58347 | ALSA-2024:2084 |
| AlmaLinux:8 | libslirp | 4.4.0-1.module_el8.9.0+3717+81096349 | ALSA-2024:2098 |
| AlmaLinux:8 | libslirp | 4.4.0-2.module_el8.10.0+3845+87b84552 | ALSA-2024:3254 |
| AlmaLinux:8 | libslirp-devel | 4.4.0-1.module_el8.8.0+3615+3543c705 | ALSA-2024:2098 |
| AlmaLinux:8 | libslirp-devel | 4.4.0-2.module_el8.10.0+3845+87b84552 | ALSA-2024:3254 |
| AlmaLinux:8 | libslirp-devel | 4.4.0-1.module_el8.9.0+3821+d7d58347 | ALSA-2024:2084 |
| AlmaLinux:8 | libslirp-devel | 4.4.0-1.module_el8.6.0+3137+d33c3efb | ALSA-2024:2084 |
| AlmaLinux:8 | netavark | 2:1.10.3-1.module_el8.10.0+3845+87b84552 | ALSA-2024:3254 |
| AlmaLinux:8 | netavark | 2:1.7.0-2.module_el8.9.0+3717+81096349 | ALSA-2024:2098 |
| AlmaLinux:8 | netavark | 2:1.0.1-38.module_el8.9.0+3627+db8ec155 | ALSA-2024:2084 |
| AlmaLinux:8 | netavark | 2:1.0.1-38.module_el8.9.0+3821+d7d58347 | ALSA-2024:2084 |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 1.2.9-1.module_el8.9.0+3755+bc5f21db | ALSA-2024:2098 |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 1.2.5-2.module_el8.8.0+3468+16b86c82 | ALSA-2024:2084 |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 1.2.5-2.module_el8.9.0+3821+d7d58347 | ALSA-2024:2084 |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+3792+03eaed9c | ALSA-2024:3254 |
| AlmaLinux:8 | podman | 3:4.6.1-9.module_el8.9.0+3823+03810114 | ALSA-2024:2098 |
| AlmaLinux:8 | podman | 4:4.9.4-1.module_el8.10.0+3845+87b84552 | ALSA-2024:3254 |
| AlmaLinux:8 | podman | 2:4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1 | ALSA-2024:2084 |
| AlmaLinux:9 | podman | 4:4.9.4-3.el9_4 | ALSA-2024:2548 |
| AlmaLinux:8 | podman-catatonit | 2:4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1 | ALSA-2024:2084 |
| AlmaLinux:8 | podman-catatonit | 2:4.0.2-26.module_el8.9.0+3821+d7d58347.alma.1 | ALSA-2024:2084 |
| AlmaLinux:8 | podman-catatonit | 4:4.9.4-1.module_el8.10.0+3845+87b84552 | ALSA-2024:3254 |
| AlmaLinux:8 | podman-catatonit | 3:4.6.1-9.module_el8.9.0+3823+03810114 | ALSA-2024:2098 |
| AlmaLinux:8 | podman-docker | 3:4.6.1-9.module_el8.9.0+3823+03810114 | ALSA-2024:2098 |
| AlmaLinux:8 | podman-docker | 4:4.9.4-1.module_el8.10.0+3845+87b84552 | ALSA-2024:3254 |
| AlmaLinux:8 | podman-docker | 2:4.0.2-26.module_el8.9.0+3821+d7d58347.alma.1 | ALSA-2024:2084 |
| AlmaLinux:9 | podman-docker | 4:4.9.4-3.el9_4 | ALSA-2024:2548 |
| AlmaLinux:8 | podman-gvproxy | 3:4.6.1-9.module_el8.9.0+3823+03810114 | ALSA-2024:2098 |
| AlmaLinux:8 | podman-gvproxy | 4:4.9.4-1.module_el8.10.0+3845+87b84552 | ALSA-2024:3254 |
| AlmaLinux:8 | podman-gvproxy | 2:4.0.2-26.module_el8.9.0+3821+d7d58347.alma.1 | ALSA-2024:2084 |
| AlmaLinux:8 | podman-plugins | 3:4.6.1-9.module_el8.9.0+3823+03810114 | ALSA-2024:2098 |
| AlmaLinux:8 | podman-plugins | 4:4.9.4-1.module_el8.10.0+3845+87b84552 | ALSA-2024:3254 |
| AlmaLinux:8 | podman-plugins | 2:4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1 | ALSA-2024:2084 |
| AlmaLinux:9 | podman-plugins | 4:4.9.4-3.el9_4 | ALSA-2024:2548 |
| AlmaLinux:8 | podman-remote | 4:4.9.4-1.module_el8.10.0+3845+87b84552 | ALSA-2024:3254 |
| AlmaLinux:8 | podman-remote | 3:4.6.1-9.module_el8.9.0+3823+03810114 | ALSA-2024:2098 |
| AlmaLinux:8 | podman-remote | 2:4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1 | ALSA-2024:2084 |
| AlmaLinux:8 | podman-remote | 2:4.0.2-26.module_el8.9.0+3821+d7d58347.alma.1 | ALSA-2024:2084 |
| AlmaLinux:9 | podman-remote | 4:4.9.4-3.el9_4 | ALSA-2024:2548 |
| AlmaLinux:8 | podman-tests | 3:4.6.1-9.module_el8.9.0+3823+03810114 | ALSA-2024:2098 |
| AlmaLinux:8 | podman-tests | 2:4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1 | ALSA-2024:2084 |
| AlmaLinux:8 | podman-tests | 2:4.0.2-26.module_el8.9.0+3821+d7d58347.alma.1 | ALSA-2024:2084 |
| AlmaLinux:8 | podman-tests | 4:4.9.4-1.module_el8.10.0+3845+87b84552 | ALSA-2024:3254 |
| AlmaLinux:9 | podman-tests | 4:4.9.4-3.el9_4 | ALSA-2024:2548 |
| AlmaLinux:8 | python3-criu | 3.15-3.module_el8.9.0+3821+d7d58347 | ALSA-2024:2084 |
| AlmaLinux:8 | python3-criu | 3.18-4.module_el8.9.0+3717+81096349 | ALSA-2024:2098 |
| AlmaLinux:8 | python3-criu | 3.18-5.module_el8.10.0+3845+87b84552 | ALSA-2024:3254 |
| AlmaLinux:8 | python3-podman | 4.9.0-1.module_el8.10.0+3792+03eaed9c | ALSA-2024:3254 |
| AlmaLinux:8 | python3-podman | 4.0.0-2.module_el8.9.0+3821+d7d58347 | ALSA-2024:2084 |
| AlmaLinux:8 | python3-podman | 4.6.0-2.module_el8.9.0+3755+bc5f21db | ALSA-2024:2098 |
| AlmaLinux:8 | runc | 1:1.1.12-1.module_el8.10.0+3845+87b84552 | ALSA-2024:3254 |
| AlmaLinux:8 | runc | 1:1.1.12-1.module_el8.9.0+3717+81096349 | ALSA-2024:2098 |
| AlmaLinux:8 | runc | 1:1.1.12-1.module_el8.9.0+3722+7fd8ab2b | ALSA-2024:2084 |
| AlmaLinux:8 | runc | 1:1.1.12-1.module_el8.9.0+3812+085a32ca | ALSA-2024:2084 |
| AlmaLinux:8 | skopeo | 2:1.6.2-9.module_el8.9.0+3821+d7d58347.alma.1 | ALSA-2024:2084 |
| AlmaLinux:8 | skopeo | 2:1.14.3-2.module_el8.10.0+3845+87b84552 | ALSA-2024:3254 |
| AlmaLinux:8 | skopeo | 2:1.13.3-3.module_el8.9.0+3717+81096349 | ALSA-2024:2098 |
| AlmaLinux:8 | skopeo | 2:1.6.2-9.module_el8.9.0+3687+dcd7ef8f.alma.1 | ALSA-2024:2084 |
| AlmaLinux:8 | skopeo-tests | 2:1.6.2-9.module_el8.9.0+3687+dcd7ef8f.alma.1 | ALSA-2024:2084 |
| AlmaLinux:8 | skopeo-tests | 2:1.14.3-2.module_el8.10.0+3845+87b84552 | ALSA-2024:3254 |
| AlmaLinux:8 | skopeo-tests | 2:1.13.3-3.module_el8.9.0+3717+81096349 | ALSA-2024:2098 |
| AlmaLinux:8 | skopeo-tests | 2:1.6.2-9.module_el8.9.0+3812+085a32ca.alma.1 | ALSA-2024:2084 |
| AlmaLinux:8 | slirp4netns | 1.1.8-3.module_el8.9.0+3821+d7d58347 | ALSA-2024:2084 |
| AlmaLinux:8 | slirp4netns | 1.2.1-1.module_el8.9.0+3643+9234dc3b | ALSA-2024:2098 |
| AlmaLinux:8 | slirp4netns | 1.2.3-1.module_el8.10.0+3845+87b84552 | ALSA-2024:3254 |
| AlmaLinux:8 | toolbox | 0.0.99.4-5.module_el8.9.0+3755+bc5f21db | ALSA-2024:2098 |
| AlmaLinux:8 | toolbox | 0.0.99.4-5.module_el8.9.0+3722+7fd8ab2b | ALSA-2024:2084 |
| AlmaLinux:8 | toolbox | 0.0.99.4-5.module_el8.9.0+3627+db8ec155 | ALSA-2024:2084 |
| AlmaLinux:8 | toolbox | 0.0.99.5-2.module_el8.10.0+3845+87b84552 | ALSA-2024:3254 |
| AlmaLinux:8 | toolbox-tests | 0.0.99.5-2.module_el8.10.0+3845+87b84552 | ALSA-2024:3254 |
| AlmaLinux:8 | toolbox-tests | 0.0.99.4-5.module_el8.9.0+3627+db8ec155 | ALSA-2024:2084 |
| AlmaLinux:8 | toolbox-tests | 0.0.99.4-5.module_el8.9.0+3755+bc5f21db | ALSA-2024:2098 |
| AlmaLinux:8 | udica | 0.2.6-20.module_el8.9.0+3755+bc5f21db | ALSA-2024:2098 |
| AlmaLinux:8 | udica | 0.2.6-4.module_el8.9.0+3821+d7d58347 | ALSA-2024:2084 |
| AlmaLinux:8 | udica | 0.2.6-21.module_el8.10.0+3845+87b84552 | ALSA-2024:3254 |
| Alpine:v3.20 | buildah | 1.35.4-r0 | ALPINE-CVE-2024-1753 |
| Alpine:v3.21 | buildah | 1.35.4-r0 | ALPINE-CVE-2024-1753 |
| Alpine:v3.22 | buildah | 1.35.4-r0 | ALPINE-CVE-2024-1753 |
| Alpine:v3.23 | buildah | 1.35.4-r0 | ALPINE-CVE-2024-1753 |
| Alpine:v3.24 | buildah | 1.35.4-r0 | ALPINE-CVE-2024-1753 |
| Alpine:v3.20 | podman | 4.9.4-r0 | ALPINE-CVE-2024-1753 |
| Alpine:v3.21 | podman | 4.9.4-r0 | ALPINE-CVE-2024-1753 |
| Alpine:v3.22 | podman | 4.9.4-r0 | ALPINE-CVE-2024-1753 |
| Alpine:v3.23 | podman | 4.9.4-r0 | ALPINE-CVE-2024-1753 |
| Alpine:v3.24 | podman | 4.9.4-r0 | ALPINE-CVE-2024-1753 |
| Debian:12 | golang-github-containers-buildah | no fix listed | DEBIAN-CVE-2024-1753 |
| Debian:13 | golang-github-containers-buildah | 1.33.7+ds1-1 | DEBIAN-CVE-2024-1753 |
| Debian:14 | golang-github-containers-buildah | 1.33.7+ds1-1 | DEBIAN-CVE-2024-1753 |
| Go | github.com/containers/buildah | 1.35.1 | GO-2024-2658 |
| Go | github.com/containers/buildah | 1.35.1 | GHSA-pmf3-c36m-g5cf |
| Go | github.com/containers/buildah | 1.34.3 | GHSA-pmf3-c36m-g5cf |
| Go | github.com/containers/buildah | 1.33.7 | GHSA-pmf3-c36m-g5cf |
| Go | github.com/containers/buildah | 1.27.4 | GHSA-pmf3-c36m-g5cf |
| Go | github.com/containers/buildah | 1.24.7 | GHSA-pmf3-c36m-g5cf |
| Go | github.com/containers/buildah | 1.29.3 | GHSA-pmf3-c36m-g5cf |
| Go | github.com/containers/buildah | 1.31.5 | GHSA-pmf3-c36m-g5cf |
| Go | github.com/containers/buildah | 1.32.3 | GHSA-pmf3-c36m-g5cf |
| Go | github.com/containers/podman/v4 | 4.9.4 | GHSA-874v-pj72-92f3 |
| Go | github.com/containers/podman/v5 | 5.0.1 | GHSA-874v-pj72-92f3 |
| Rocky Linux:8 | aardvark-dns | 2:1.7.0-1.module+el8.9.0+1580+e76741f0 | RLSA-2024:2098 |
| Rocky Linux:8 | buildah | 1:1.24.7-1.module+el8.9.0+1797+b9a484c9 | RLSA-2024:2084 |
| Rocky Linux:8 | buildah | 1:1.31.5-1.module+el8.9.0+1796+73260e20 | RLSA-2024:2098 |
| Rocky Linux:8 | cockpit-podman | 0:75-1.module+el8.9.0+1580+e76741f0 | RLSA-2024:2098 |
| Rocky Linux:8 | cockpit-podman | 0:46-1.module+el8.9.0+1445+07728297 | RLSA-2024:2084 |
| Rocky Linux:8 | conmon | 3:2.1.8-1.module+el8.9.0+1444+82dcc378 | RLSA-2024:2098 |
| Rocky Linux:8 | conmon | 2:2.1.4-2.module+el8.9.0+1445+07728297 | RLSA-2024:2084 |
| Rocky Linux:8 | container-selinux | 2:2.205.0-3.module+el8.9.0+1445+07728297 | RLSA-2024:2084 |
| Rocky Linux:8 | container-selinux | 2:2.229.0-1.module+el8.9.0+1774+ddf2a761 | RLSA-2024:2098 |
| Rocky Linux:8 | containernetworking-plugins | 1:1.1.1-6.module+el8.9.0+1653+32675f1c | RLSA-2024:2084 |
| Rocky Linux:8 | containernetworking-plugins | 1:1.3.0-8.module+el8.9.0+1703+29de406e | RLSA-2024:2098 |
| Rocky Linux:8 | containers-common | 2:1-38.module+el8.9.0+1445+07728297 | RLSA-2024:2084 |
| Rocky Linux:8 | containers-common | 2:1-71.module+el8.9.0+1703+29de406e | RLSA-2024:2098 |
| Rocky Linux:8 | criu | 0:3.18-4.module+el8.9.0+1420+91577025 | RLSA-2024:2098 |
| Rocky Linux:8 | criu | 0:3.15-3.module+el8.9.0+1445+07728297 | RLSA-2024:2084 |
| Rocky Linux:8 | crun | 0:1.8.7-1.module+el8.9.0+1580+e76741f0 | RLSA-2024:2084 |
| Rocky Linux:8 | crun | 0:1.8.7-1.module+el8.9.0+1580+e76741f0 | RLSA-2024:2098 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.12-1.module+el8.9.0+1580+e76741f0 | RLSA-2024:2098 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.9-2.module+el8.9.0+1445+07728297 | RLSA-2024:2084 |
| Rocky Linux:8 | libslirp | 0:4.4.0-1.module+el8.9.0+1420+91577025 | RLSA-2024:2098 |
| Rocky Linux:8 | libslirp | 0:4.4.0-1.module+el8.9.0+1420+91577025 | RLSA-2024:2084 |
| Rocky Linux:8 | netavark | 2:1.7.0-2.module+el8.9.0+1703+29de406e | RLSA-2024:2098 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.5-2.module+el8.9.0+1445+07728297 | RLSA-2024:2084 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.9-1.module+el8.9.0+1580+e76741f0 | RLSA-2024:2098 |
| Rocky Linux:8 | podman | 2:4.0.2-26.module+el8.9.0+1702+822f0675 | RLSA-2024:2084 |
| Rocky Linux:8 | podman | 3:4.6.1-9.module+el8.9.0+1796+73260e20 | RLSA-2024:2098 |
| Rocky Linux:9 | podman | 4:4.9.4-3.el9_4 | RLSA-2024:2548 |
| Rocky Linux:8 | python-podman | 0:4.6.0-2.module+el8.9.0+1703+29de406e | RLSA-2024:2098 |
| Rocky Linux:8 | python-podman | 0:4.0.0-2.module+el8.9.0+1445+07728297 | RLSA-2024:2084 |
| Rocky Linux:8 | runc | 1:1.1.12-1.module+el8.9.0+1702+822f0675 | RLSA-2024:2098 |
| Rocky Linux:8 | runc | 1:1.1.12-1.module+el8.9.0+1702+822f0675 | RLSA-2024:2084 |
| Rocky Linux:8 | skopeo | 2:1.6.2-9.module+el8.9.0+1578+aa900b44 | RLSA-2024:2084 |
| Rocky Linux:8 | skopeo | 2:1.13.3-3.module+el8.9.0+1703+29de406e | RLSA-2024:2098 |
| Rocky Linux:8 | slirp4netns | 0:1.1.8-3.module+el8.9.0+1445+07728297 | RLSA-2024:2084 |
| Rocky Linux:8 | slirp4netns | 0:1.2.1-1.module+el8.9.0+1580+e76741f0 | RLSA-2024:2098 |
| Rocky Linux:8 | toolbox | 0:0.0.99.4-5.module+el8.9.0+1445+07728297 | RLSA-2024:2084 |
| Rocky Linux:8 | toolbox | 0:0.0.99.4-5.module+el8.9.0+1445+07728297 | RLSA-2024:2098 |
| Rocky Linux:8 | udica | 0:0.2.6-20.module+el8.9.0+1420+91577025 | RLSA-2024:2098 |
| Rocky Linux:8 | udica | 0:0.2.6-4.module+el8.9.0+1445+07728297 | RLSA-2024:2084 |
| Ubuntu:22.04:LTS | golang-github-containers-buildah | no fix listed | UBUNTU-CVE-2024-1753 |
| Ubuntu:25.10 | golang-github-containers-buildah | no fix listed | UBUNTU-CVE-2024-1753 |
| Ubuntu:26.10 | golang-github-containers-buildah | no fix listed | UBUNTU-CVE-2024-1753 |
Affected products (as reported)
Weakness: CWE-59 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
References
- RHSA-2024:2049 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:2055 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:2064 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:2066 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:2077 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:2084 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:2089 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:2090 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:2097 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:2098 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:2548 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:2645 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:2669 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:2672 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:2784 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:2877 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:3254 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2024-1753 vdb-entry, x_refsource_REDHAT
- RHBZ#2265513 issue-tracking, x_refsource_REDHAT
- https://github.com/containers/buildah/security/advisories/GHSA-pmf3-c36m-g5cf
- https://github.com/containers/podman/security/advisories/GHSA-874v-pj72-92f3
- https://pkg.go.dev/vuln/GO-2024-2658
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FCRZVUDOFM5CPREQKBEU2VK2QK62PSBP/ x_transferred
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KOYMVMQ7RWMDTSKQTBO734BE3WQPI2AJ/ x_transferred
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZVBSVZGVABPYIHK5HZM472NPGWMI7WXH/ x_transferred