Vulnerabilities > CVE-2024-9675

047910
CVSS 7.8 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
low complexity
buildah-project
redhat
NVD
Published: 2024-10-09
Updated: 2025-04-10

Summary

A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the host (read/write) into the container as long as those files can be accessed by the user running Buildah.

Vulnerable Configurations

Part Description Count
Application
Buildah_Project
1
Application
Redhat
5
OS
Redhat
39

References