Riskcovery

CVE-2024-1753

Buildah: buildah: container escape via improper bind mount validation

State
Published
Severity
8.6 High
Published
Mar 18, 2024
Updated
Sep 24, 2026
Reserved
Feb 22, 2024

Read the record on cve.org

Description

A flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers. A malicious Containerfile can use a dummy image with a symbolic link to the root filesystem as a mount source and cause the mount operation to mount the host root filesystem inside the RUN step. The commands inside the RUN step will then have read-write access to the host filesystem, allowing for full container escape at build time.

Scores

CVSSScoreVectorSource
3.18.6 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:Hredhat

Weaknesses

  • CWE-59 Improper Link Resolution Before File Access ('Link Following')

Affected Products

ProductVersions
buildah
  • 4.15.0Affected
Red Hat Enterprise Linux 8Red Hat
  • 8090020240413110917.d7b6f4b7 and laterNot affected
Red Hat Enterprise Linux 8Red Hat
  • 8090020240417184044.e7857ab1 and laterNot affected
Red Hat Enterprise Linux 8Red Hat
  • 8100020240419145834.afee755d and laterNot affected
Red Hat Enterprise Linux 8.6 Extended Update SupportRed Hat
  • 8060020240422155330.3b538bd8 and laterNot affected
Red Hat Enterprise Linux 8.6 Extended Update SupportRed Hat
  • 8060020240419071711.2e213529 and laterNot affected
Red Hat Enterprise Linux 8.8 Extended Update SupportRed Hat
  • 8080020240422101606.0f77c1b7 and laterNot affected
Red Hat Enterprise Linux 9Red Hat
  • 1:1.31.5-1.el9_3 and laterNot affected
Red Hat Enterprise Linux 9Red Hat
  • 4:4.9.4-3.el9_4 and laterNot affected
Red Hat Enterprise Linux 9.0 Extended Update SupportRed Hat
  • 1:1.26.7-1.el9_0 and laterNot affected
Red Hat Enterprise Linux 9.0 Extended Update SupportRed Hat
  • 2:4.2.0-3.el9_0 and laterNot affected
Red Hat Enterprise Linux 9.2 Extended Update SupportRed Hat
  • 1:1.29.3-1.el9_2 and laterNot affected
Red Hat Enterprise Linux 9.2 Extended Update SupportRed Hat
  • 2:4.4.1-16.el9_2 and laterNot affected
Red Hat OpenShift Container Platform 4.12Red Hat
  • 3:4.4.1-3.2.rhaos4.12.el8 and laterNot affected
Red Hat OpenShift Container Platform 4.13Red Hat
  • 3:4.4.1-5.3.rhaos4.13.el8 and laterNot affected
Red Hat OpenShift Container Platform 4.13Red Hat
  • 3:4.4.1-7.3.rhaos4.13.el8 and laterNot affected
Red Hat OpenShift Container Platform 4.14Red Hat
  • 3:4.4.1-13.4.rhaos4.14.el8 and laterNot affected
Red Hat OpenShift Container Platform 4.15Red Hat
  • 3:4.4.1-23.2.rhaos4.15.el8 and laterNot affected
Red Hat Enterprise Linux 7Red Hat
    Red Hat Enterprise Linux 7Red Hat
      Red Hat OpenShift Container Platform 3.11Red Hat

        References

        Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.