Buildah Cache Mount Path Traversal via RUN Instruction
CVE-2024-9675 Published on October 9, 2024

Buildah: buildah allows arbitrary directory mount
A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the host (read/write) into the container as long as those files can be accessed by the user running Buildah.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD

Vulnerability Analysis

CVE-2024-9675 can be exploited with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Attack Vector:
LOCAL
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Timeline

Reported to Red Hat.

Made public.

Weakness Type

What is a Directory traversal Vulnerability?

The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

CVE-2024-9675 has been classified to as a Directory traversal vulnerability or weakness.


Products Associated with CVE-2024-9675

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2024-9675 are published in these products:

Buildahproject Buildah
 
Red Hat Enterprise Linux (RHEL)
 
Red Hat Enterprise Linux Server Aus
 
Red Hat Enterprise Linux Server Tus
 
Red Hat Enterprise Linux Eus
 
Red Hat Openshift Container Platform
 
Red Hat Enterprise Linux Ibm Z Systems Eus
 
Red Hat Enterprise Linux Power Little Endian Eus
 
Red Hat Enterprise Linux Arm 64 Eus
 
Red Hat Enterprise Linux Server Power Little Endian Update Services Sap Solutions
 
Red Hat Enterprise Linux Power Little Endian
 
Red Hat Enterprise Linux For Arm 64
 
Red Hat Enterprise Linux Ibm Z Systems
 
Red Hat Enterprise Linux Update Services Sap Solutions
 
Red Hat Rhel E4s
 
Red Hat Rhel Aus
 
Red Hat Rhel Tus
 
Red Hat Rhel Eus
 
Red Hat Openshift
 
Red Hat Ocp Tools
 
Red Hat Quay
 
Red Hat Rhivos
 

Exploit Probability

EPSS
0.13%
Percentile
33.20%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.