Vulnerability · Published Jan 22, 2025 · Assigned by redhat

CVE-2024-11218Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile

High 8.6

In plain English

A high-severity privilege mismanagement in buildah. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 31% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.6High

Exploit odds (30 days)0.4%top 69.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and directories on the host.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
AlmaLinux:8	aardvark-dns	2:1.10.1-2.module_el8.10.0+3909+6e1c1eb7	ALSA-2025:1372
AlmaLinux:8	aardvark-dns	2:1.10.1-2.module_el8.10.0+3926+f12484f5	ALSA-2025:1372
AlmaLinux:8	aardvark-dns	2:1.10.1-2.module_el8.10.0+3901+4b80ecd7	ALSA-2025:1372
AlmaLinux:8	buildah	2:1.33.12-1.module_el8.10.0+3959+b8dc5e6a	ALSA-2025:1372
AlmaLinux:9	buildah	2:1.37.6-1.el9_5	ALSA-2025:0923
AlmaLinux:8	buildah-tests	2:1.33.12-1.module_el8.10.0+3959+b8dc5e6a	ALSA-2025:1372
AlmaLinux:9	buildah-tests	2:1.37.6-1.el9_5	ALSA-2025:0923
AlmaLinux:8	cockpit-podman	84.1-1.module_el8.10.0+3876+e55593a8	ALSA-2025:1372
AlmaLinux:8	conmon	3:2.1.10-1.module_el8.10.0+3876+e55593a8	ALSA-2025:1372
AlmaLinux:8	conmon	3:2.1.10-1.module_el8.10.0+3909+6e1c1eb7	ALSA-2025:1372
AlmaLinux:8	conmon	3:2.1.10-1.module_el8.10.0+3901+4b80ecd7	ALSA-2025:1372
AlmaLinux:8	conmon	3:2.1.10-1.module_el8.10.0+3845+87b84552	ALSA-2025:1372
AlmaLinux:8	container-selinux	2:2.229.0-2.module_el8.10.0+3909+6e1c1eb7	ALSA-2025:1372
AlmaLinux:8	containernetworking-plugins	1:1.4.0-5.module_el8.10.0+3909+6e1c1eb7	ALSA-2025:1372
AlmaLinux:8	containernetworking-plugins	1:1.4.0-5.module_el8.10.0+3926+f12484f5	ALSA-2025:1372
AlmaLinux:8	containernetworking-plugins	1:1.4.0-5.module_el8.10.0+3876+e55593a8	ALSA-2025:1372
AlmaLinux:8	containers-common	2:1-82.module_el8.10.0+3901+4b80ecd7	ALSA-2025:1372
AlmaLinux:8	containers-common	2:1-82.module_el8.10.0+3876+e55593a8	ALSA-2025:1372
AlmaLinux:8	crit	3.18-5.module_el8.10.0+3901+4b80ecd7	ALSA-2025:1372
AlmaLinux:8	crit	3.18-5.module_el8.10.0+3858+6ad51f9f	ALSA-2025:1372
AlmaLinux:8	crit	3.18-5.module_el8.10.0+3845+87b84552	ALSA-2025:1372
AlmaLinux:8	criu	3.18-5.module_el8.10.0+3876+e55593a8	ALSA-2025:1372
AlmaLinux:8	criu	3.18-5.module_el8.10.0+3909+6e1c1eb7	ALSA-2025:1372
AlmaLinux:8	criu	3.18-5.module_el8.10.0+3926+f12484f5	ALSA-2025:1372
AlmaLinux:8	criu-devel	3.18-5.module_el8.10.0+3926+f12484f5	ALSA-2025:1372
AlmaLinux:8	criu-devel	3.18-5.module_el8.10.0+3876+e55593a8	ALSA-2025:1372
AlmaLinux:8	criu-devel	3.18-5.module_el8.10.0+3858+6ad51f9f	ALSA-2025:1372
AlmaLinux:8	criu-libs	3.18-5.module_el8.10.0+3845+87b84552	ALSA-2025:1372
AlmaLinux:8	criu-libs	3.18-5.module_el8.10.0+3909+6e1c1eb7	ALSA-2025:1372
AlmaLinux:8	criu-libs	3.18-5.module_el8.10.0+3926+f12484f5	ALSA-2025:1372
AlmaLinux:8	crun	1.14.3-2.module_el8.10.0+3845+87b84552	ALSA-2025:1372
AlmaLinux:8	crun	1.14.3-2.module_el8.10.0+3926+f12484f5	ALSA-2025:1372
AlmaLinux:8	crun	1.14.3-2.module_el8.10.0+3909+6e1c1eb7	ALSA-2025:1372
AlmaLinux:8	fuse-overlayfs	1.13-1.module_el8.10.0+3792+03eaed9c	ALSA-2025:1372
AlmaLinux:8	fuse-overlayfs	1.13-1.module_el8.10.0+3901+4b80ecd7	ALSA-2025:1372
AlmaLinux:8	fuse-overlayfs	1.13-1.module_el8.10.0+3909+6e1c1eb7	ALSA-2025:1372
AlmaLinux:8	libslirp	4.4.0-2.module_el8.10.0+3845+87b84552	ALSA-2025:1372
AlmaLinux:8	libslirp	4.4.0-2.module_el8.10.0+3876+e55593a8	ALSA-2025:1372
AlmaLinux:8	libslirp	4.4.0-2.module_el8.10.0+3858+6ad51f9f	ALSA-2025:1372
AlmaLinux:8	libslirp-devel	4.4.0-2.module_el8.10.0+3876+e55593a8	ALSA-2025:1372
AlmaLinux:8	libslirp-devel	4.4.0-2.module_el8.10.0+3901+4b80ecd7	ALSA-2025:1372
AlmaLinux:8	libslirp-devel	4.4.0-2.module_el8.10.0+3909+6e1c1eb7	ALSA-2025:1372
AlmaLinux:8	libslirp-devel	4.4.0-2.module_el8.10.0+3926+f12484f5	ALSA-2025:1372
AlmaLinux:8	netavark	2:1.10.3-1.module_el8.10.0+3858+6ad51f9f	ALSA-2025:1372
AlmaLinux:8	netavark	2:1.10.3-1.module_el8.10.0+3926+f12484f5	ALSA-2025:1372
AlmaLinux:8	netavark	2:1.10.3-1.module_el8.10.0+3901+4b80ecd7	ALSA-2025:1372
AlmaLinux:8	netavark	2:1.10.3-1.module_el8.10.0+3845+87b84552	ALSA-2025:1372
AlmaLinux:8	oci-seccomp-bpf-hook	1.2.10-1.module_el8.10.0+3909+6e1c1eb7	ALSA-2025:1372
AlmaLinux:8	oci-seccomp-bpf-hook	1.2.10-1.module_el8.10.0+3792+03eaed9c	ALSA-2025:1372
AlmaLinux:8	oci-seccomp-bpf-hook	1.2.10-1.module_el8.10.0+3876+e55593a8	ALSA-2025:1372
AlmaLinux:8	podman	4:4.9.4-19.module_el8.10.0+3959+b8dc5e6a	ALSA-2025:1372
AlmaLinux:9	podman	4:5.2.2-13.el9_5	ALSA-2025:0922
AlmaLinux:8	podman-catatonit	4:4.9.4-19.module_el8.10.0+3959+b8dc5e6a	ALSA-2025:1372
AlmaLinux:8	podman-docker	4:4.9.4-19.module_el8.10.0+3959+b8dc5e6a	ALSA-2025:1372
AlmaLinux:9	podman-docker	4:5.2.2-13.el9_5	ALSA-2025:0922
AlmaLinux:8	podman-gvproxy	4:4.9.4-19.module_el8.10.0+3959+b8dc5e6a	ALSA-2025:1372
AlmaLinux:8	podman-plugins	4:4.9.4-19.module_el8.10.0+3959+b8dc5e6a	ALSA-2025:1372
AlmaLinux:9	podman-plugins	4:5.2.2-13.el9_5	ALSA-2025:0922
AlmaLinux:8	podman-remote	4:4.9.4-19.module_el8.10.0+3959+b8dc5e6a	ALSA-2025:1372
AlmaLinux:9	podman-remote	4:5.2.2-13.el9_5	ALSA-2025:0922
AlmaLinux:8	podman-tests	4:4.9.4-19.module_el8.10.0+3959+b8dc5e6a	ALSA-2025:1372
AlmaLinux:9	podman-tests	4:5.2.2-13.el9_5	ALSA-2025:0922
AlmaLinux:8	python3-criu	3.18-5.module_el8.10.0+3858+6ad51f9f	ALSA-2025:1372
AlmaLinux:8	python3-criu	3.18-5.module_el8.10.0+3926+f12484f5	ALSA-2025:1372
AlmaLinux:8	python3-criu	3.18-5.module_el8.10.0+3901+4b80ecd7	ALSA-2025:1372
AlmaLinux:8	python3-criu	3.18-5.module_el8.10.0+3876+e55593a8	ALSA-2025:1372
AlmaLinux:8	python3-podman	4.9.0-3.module_el8.10.0+3926+f12484f5	ALSA-2025:1372
AlmaLinux:8	runc	1:1.1.12-6.module_el8.10.0+3959+b8dc5e6a	ALSA-2025:1372
AlmaLinux:8	skopeo	2:1.14.5-3.module_el8.10.0+3926+f12484f5	ALSA-2025:1372
AlmaLinux:8	skopeo	2:1.14.5-3.module_el8.10.0+3901+4b80ecd7	ALSA-2025:1372
AlmaLinux:8	skopeo	2:1.14.5-3.module_el8.10.0+3909+6e1c1eb7	ALSA-2025:1372
AlmaLinux:8	skopeo	2:1.14.5-3.module_el8.10.0+3876+e55593a8	ALSA-2025:1372
AlmaLinux:8	skopeo-tests	2:1.14.5-3.module_el8.10.0+3876+e55593a8	ALSA-2025:1372
AlmaLinux:8	skopeo-tests	2:1.14.5-3.module_el8.10.0+3901+4b80ecd7	ALSA-2025:1372
AlmaLinux:8	slirp4netns	1.2.3-1.module_el8.10.0+3845+87b84552	ALSA-2025:1372
AlmaLinux:8	slirp4netns	1.2.3-1.module_el8.10.0+3926+f12484f5	ALSA-2025:1372
AlmaLinux:8	slirp4netns	1.2.3-1.module_el8.10.0+3901+4b80ecd7	ALSA-2025:1372
AlmaLinux:8	slirp4netns	1.2.3-1.module_el8.10.0+3876+e55593a8	ALSA-2025:1372
AlmaLinux:8	toolbox	0.0.99.5-2.module_el8.10.0+3901+4b80ecd7	ALSA-2025:1372
AlmaLinux:8	toolbox	0.0.99.5-2.module_el8.10.0+3858+6ad51f9f	ALSA-2025:1372
AlmaLinux:8	toolbox	0.0.99.5-2.module_el8.10.0+3845+87b84552	ALSA-2025:1372
AlmaLinux:8	toolbox	0.0.99.5-2.module_el8.10.0+3876+e55593a8	ALSA-2025:1372
AlmaLinux:8	toolbox-tests	0.0.99.5-2.module_el8.10.0+3858+6ad51f9f	ALSA-2025:1372
AlmaLinux:8	toolbox-tests	0.0.99.5-2.module_el8.10.0+3909+6e1c1eb7	ALSA-2025:1372
AlmaLinux:8	udica	0.2.6-21.module_el8.10.0+3926+f12484f5	ALSA-2025:1372
Alpine:v3.21	buildah	1.38.1-r0	ALPINE-CVE-2024-11218
Alpine:v3.22	buildah	1.38.1-r0	ALPINE-CVE-2024-11218
Alpine:v3.23	buildah	1.38.1-r0	ALPINE-CVE-2024-11218
Alpine:v3.24	buildah	1.38.1-r0	ALPINE-CVE-2024-11218
Alpine:v3.21	podman	5.3.2-r0	ALPINE-CVE-2024-11218
Alpine:v3.22	podman	5.3.2-r0	ALPINE-CVE-2024-11218
Alpine:v3.23	podman	5.3.2-r0	ALPINE-CVE-2024-11218
Alpine:v3.24	podman	5.3.2-r0	ALPINE-CVE-2024-11218
Debian:12	golang-github-containers-buildah	no fix listed	DEBIAN-CVE-2024-11218
Debian:13	golang-github-containers-buildah	1.38.1+ds1-1	DEBIAN-CVE-2024-11218
Debian:14	golang-github-containers-buildah	1.38.1+ds1-1	DEBIAN-CVE-2024-11218
Go	github.com/containers/buildah	1.35.5	GHSA-5vpc-35f4-r8w6
Go	github.com/containers/buildah	1.38.1	GHSA-5vpc-35f4-r8w6
Go	github.com/containers/buildah	1.37.6	GHSA-5vpc-35f4-r8w6
Go	github.com/containers/buildah	1.33.12	GHSA-5vpc-35f4-r8w6
Go	github.com/containers/buildah	1.33.12, 1.35.5, 1.37.6, 1.38.1	GO-2025-3414
Rocky Linux:8	aardvark-dns	2:1.10.1-2.module+el8.10.0+1874+ce489889	RLSA-2025:1372
Rocky Linux:8	buildah	2:1.33.12-1.module+el8.10.0+1933+1fc610b1	RLSA-2025:1372
Rocky Linux:9	buildah	2:1.37.6-1.el9_5	RLSA-2025:0923
Rocky Linux:8	cockpit-podman	0:84.1-1.module+el8.10.0+1815+5fe7415e	RLSA-2025:1372
Rocky Linux:8	conmon	3:2.1.10-1.module+el8.10.0+1815+5fe7415e	RLSA-2025:1372
Rocky Linux:8	container-selinux	2:2.229.0-2.module+el8.10.0+1815+5fe7415e	RLSA-2025:1372
Rocky Linux:8	containernetworking-plugins	1:1.4.0-5.module+el8.10.0+1843+6892ab28	RLSA-2025:1372
Rocky Linux:8	containers-common	2:1-82.module+el8.10.0+1843+6892ab28	RLSA-2025:1372
Rocky Linux:8	criu	0:3.18-5.module+el8.10.0+1815+5fe7415e	RLSA-2025:1372
Rocky Linux:8	crun	0:1.14.3-2.module+el8.10.0+1815+5fe7415e	RLSA-2025:1372
Rocky Linux:8	fuse-overlayfs	0:1.13-1.module+el8.10.0+1815+5fe7415e	RLSA-2025:1372
Rocky Linux:8	libslirp	0:4.4.0-2.module+el8.10.0+1815+5fe7415e	RLSA-2025:1372
Rocky Linux:8	netavark	2:1.10.3-1.module+el8.10.0+1815+5fe7415e	RLSA-2025:1372
Rocky Linux:8	oci-seccomp-bpf-hook	0:1.2.10-1.module+el8.10.0+1815+5fe7415e	RLSA-2025:1372
Rocky Linux:8	podman	4:4.9.4-19.module+el8.10.0+1933+1fc610b1	RLSA-2025:1372
Rocky Linux:9	podman	4:5.2.2-13.el9_5	RLSA-2025:0922
Rocky Linux:8	python-podman	0:4.9.0-3.module+el8.10.0+1896+b18fa106	RLSA-2025:1372
Rocky Linux:8	runc	1:1.1.12-6.module+el8.10.0+1933+1fc610b1	RLSA-2025:1372
Rocky Linux:8	skopeo	2:1.14.5-3.module+el8.10.0+1843+6892ab28	RLSA-2025:1372
Rocky Linux:8	slirp4netns	0:1.2.3-1.module+el8.10.0+1815+5fe7415e	RLSA-2025:1372
Rocky Linux:8	toolbox	0:0.0.99.5-2.module+el8.10.0+1815+5fe7415e.rocky.0.2.rocky.0.2	RLSA-2025:1372
Rocky Linux:8	udica	0:0.2.6-21.module+el8.10.0+1815+5fe7415e	RLSA-2025:1372
Ubuntu:25.10	podman	no fix listed	UBUNTU-CVE-2024-11218
Ubuntu:26.10	podman	no fix listed	UBUNTU-CVE-2024-11218

Affected products (as reported)

Vendor	Product	Versions
	buildah	0 – before 1.33.121.35.0 – before 1.35.51.37.0 – before 1.37.61.38.0 – before 1.38.1
Red Hat	Red Hat Enterprise Linux 8	see references
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	see references
Red Hat	Red Hat Enterprise Linux 8.6 Telecommunications Update Service	see references
Red Hat	Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	see references
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support	see references
Red Hat	Red Hat Enterprise Linux 9	see references
Red Hat	Red Hat Enterprise Linux 9	see references
Red Hat	Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	see references
Red Hat	Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	see references
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	see references
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	see references
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	see references
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	see references
Red Hat	Red Hat OpenShift Container Platform 4.12	see references
Red Hat	Red Hat OpenShift Container Platform 4.12	see references
Red Hat	Red Hat OpenShift Container Platform 4.13	see references
Red Hat	Red Hat OpenShift Container Platform 4.13	see references
Red Hat	Red Hat OpenShift Container Platform 4.13	see references
Red Hat	Red Hat OpenShift Container Platform 4.14	see references
Red Hat	Red Hat OpenShift Container Platform 4.14	see references
Red Hat	Red Hat OpenShift Container Platform 4.14	see references
Red Hat	Red Hat OpenShift Container Platform 4.14	see references
Red Hat	Red Hat OpenShift Container Platform 4.15	see references
Red Hat	Red Hat OpenShift Container Platform 4.15	see references
Red Hat	Red Hat OpenShift Container Platform 4.15	see references
Red Hat	Red Hat OpenShift Container Platform 4.15	see references
Red Hat	Red Hat OpenShift Container Platform 4.16	see references
Red Hat	Red Hat OpenShift Container Platform 4.16	see references
Red Hat	Red Hat OpenShift Container Platform 4.16	see references

Weakness: CWE-269 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

References

RHEA-2024:6126 vendor-advisory, x_refsource_REDHAT
RHSA-2025:0830 vendor-advisory, x_refsource_REDHAT
RHSA-2025:0878 vendor-advisory, x_refsource_REDHAT
RHSA-2025:0922 vendor-advisory, x_refsource_REDHAT
RHSA-2025:0923 vendor-advisory, x_refsource_REDHAT
RHSA-2025:1186 vendor-advisory, x_refsource_REDHAT
RHSA-2025:1187 vendor-advisory, x_refsource_REDHAT
RHSA-2025:1188 vendor-advisory, x_refsource_REDHAT
RHSA-2025:1189 vendor-advisory, x_refsource_REDHAT
RHSA-2025:1207 vendor-advisory, x_refsource_REDHAT
RHSA-2025:1275 vendor-advisory, x_refsource_REDHAT
RHSA-2025:1295 vendor-advisory, x_refsource_REDHAT
RHSA-2025:1296 vendor-advisory, x_refsource_REDHAT
RHSA-2025:1372 vendor-advisory, x_refsource_REDHAT
RHSA-2025:1453 vendor-advisory, x_refsource_REDHAT
RHSA-2025:1707 vendor-advisory, x_refsource_REDHAT
RHSA-2025:1713 vendor-advisory, x_refsource_REDHAT
RHSA-2025:1908 vendor-advisory, x_refsource_REDHAT
RHSA-2025:1910 vendor-advisory, x_refsource_REDHAT
RHSA-2025:1914 vendor-advisory, x_refsource_REDHAT
RHSA-2025:2441 vendor-advisory, x_refsource_REDHAT
RHSA-2025:2443 vendor-advisory, x_refsource_REDHAT
RHSA-2025:2454 vendor-advisory, x_refsource_REDHAT
RHSA-2025:2456 vendor-advisory, x_refsource_REDHAT
RHSA-2025:2701 vendor-advisory, x_refsource_REDHAT
RHSA-2025:2703 vendor-advisory, x_refsource_REDHAT
RHSA-2025:2710 vendor-advisory, x_refsource_REDHAT
RHSA-2025:2712 vendor-advisory, x_refsource_REDHAT
RHSA-2025:3577 vendor-advisory, x_refsource_REDHAT
RHSA-2025:3798 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-11218 vdb-entry, x_refsource_REDHAT
RHBZ#2326231 issue-tracking, x_refsource_REDHAT
https://github.com/containers/buildah/pull/5918