CVE-2024-1753
High · 8.6CVSS
8.6
EPSS
0.5%
Published
Mar 18, 2024
CISA due date
—
Cloudanix analysis
Next patch cycle
SSVC: Track
A flaw in certain container build tools could let someone who supplies a bad build file take over the entire computer during the build process.
- Exploitation
- Requires User Interaction
- Attacker needs
- User Interaction
- Complexity
- Low
- Impact
- Full Compromise
- Component
- Application
- Class
- Container Escape
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
A malicious Containerfile can exploit a symlink in a dummy image to mount the host root filesystem into a build container during the RUN step, granting the build process read-write access to the entire host filesystem.
Why it matters to the business
Attackers could achieve full container escape during image builds on affected systems, potentially leading to host compromise, data theft, or lateral movement; the low exploit maturity and lack of known campaigns reduce immediate urgency but the flaw remains in older package versions used in AlmaLinux 8 environments.
How an attack unfolds
An attacker supplies a crafted Containerfile referencing a dummy image containing a symlink to the host root; during the build, the mount operation resolves the symlink and mounts the host filesystem into the RUN step, allowing arbitrary commands with full host read-write access.
How to fix it
Upgrade gcc-toolset-11-make and gcc-toolset-11-make-devel on AlmaLinux 8 to version 1:4.3-2.el8 or later; rebuild any affected container images after patching the build tooling.
How to confirm the fix worked
Verify installed package versions match or exceed the fixed releases; test builds with known-malicious Containerfile patterns in an isolated environment to confirm the mount is no longer permitted.
Typical attack path
- Attacker crafts a malicious Containerfile that references a dummy base image containing a symlink pointing to the host root filesystem.
- The build tool processes the Containerfile and executes the RUN instruction.
- The mount operation follows the symlink and attaches the host root into the build container.
- Commands in the RUN step execute with read-write privileges over the host filesystem, enabling escape and further actions.
How to detect it
Review build logs and container runtime audit events for unexpected mount operations involving symlinks or host paths during image builds; look for processes spawned inside build containers accessing host-level directories.
What your security team should do
- Apply the specified package updates immediately on all build hosts using the affected AlmaLinux 8 packages.
- Audit Containerfiles and build pipelines for untrusted sources and restrict build privileges.
- Monitor build logs for unexpected mount operations or symlink usage during image creation.
The record
A flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers. A malicious Containerfile can use a dummy image with a symbolic link to the root filesystem as a mount source and cause the mount operation to mount the host root filesystem inside the RUN step. The commands inside the RUN step will then have read-write access to the host filesystem, allowing for full container escape at build time.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/containers/buildah | 0 | 1.35.1 |
| Go | github.com/containers/buildah | 1.24.0 | 1.24.7 |
| Go | github.com/containers/buildah | 1.25.0 | 1.27.4 |
| Go | github.com/containers/buildah | 1.28.0 | 1.29.3 |
| Go | github.com/containers/buildah | 1.30.0 | 1.31.5 |
| Go | github.com/containers/buildah | 1.32.0 | 1.32.3 |
| Go | github.com/containers/buildah | 1.33.0 | 1.33.7 |
| Go | github.com/containers/buildah | 1.34.0 | 1.34.3 |
| Go | github.com/containers/buildah | 1.35.0 | 1.35.1 |
| Go | github.com/containers/podman/v4 | 0 | 4.9.4 |
| Go | github.com/containers/podman/v5 | 0 | 5.0.1 |
| AlmaLinux:8 | aardvark-dns | 0 | 2:1.0.1-38.module_el8.9.0+3627+db8ec155 |
| AlmaLinux:8 | aardvark-dns | 0 | 2:1.0.1-38.module_el8.9.0+3821+d7d58347 |
| AlmaLinux:8 | aardvark-dns | 0 | 2:1.7.0-1.module_el8.9.0+3657+d86e192f |
| AlmaLinux:8 | aardvark-dns | 0 | 2:1.10.0-1.module_el8.10.0+3792+03eaed9c |
| AlmaLinux:8 | buildah | 0 | 1:1.24.7-1.module_el8.9.0+3821+d7d58347.alma.1 |
| AlmaLinux:8 | buildah | 0 | 1:1.31.5-1.module_el8.9.0+3823+03810114 |
| AlmaLinux:8 | buildah | 0 | 2:1.33.7-1.module_el8.10.0+3845+87b84552 |
| AlmaLinux:8 | buildah-tests | 0 | 1:1.24.7-1.module_el8.9.0+3821+d7d58347.alma.1 |
| AlmaLinux:8 | buildah-tests | 0 | 1:1.31.5-1.module_el8.9.0+3823+03810114 |
| AlmaLinux:8 | buildah-tests | 0 | 2:1.33.7-1.module_el8.10.0+3845+87b84552 |
| AlmaLinux:8 | cockpit-podman | 0 | 46-1.module_el8.7.0+3344+5bcd850f |
| AlmaLinux:8 | cockpit-podman | 0 | 75-1.module_el8.9.0+3797+9f808d65 |
| AlmaLinux:8 | cockpit-podman | 0 | 84.1-1.module_el8.10.0+3792+03eaed9c |
| AlmaLinux:8 | conmon | 0 | 2:2.1.4-2.module_el8.9.0+3627+db8ec155 |
| AlmaLinux:8 | conmon | 0 | 2:2.1.4-2.module_el8.9.0+3821+d7d58347 |
| AlmaLinux:8 | conmon | 0 | 3:2.1.8-1.module_el8.9.0+3755+bc5f21db |
| AlmaLinux:8 | conmon | 0 | 3:2.1.10-1.module_el8.10.0+3845+87b84552 |
| AlmaLinux:8 | container-selinux | 0 | 2:2.205.0-3.module_el8.9.0+3687+dcd7ef8f |
| AlmaLinux:8 | container-selinux | 0 | 2:2.229.0-1.module_el8.9.0+3755+bc5f21db |
| AlmaLinux:8 | container-selinux | 0 | 2:2.229.0-2.module_el8.10.0+3792+03eaed9c |
| AlmaLinux:8 | containernetworking-plugins | 0 | 1:1.1.1-6.module_el8.9.0+3711+04fcca5e |
| AlmaLinux:8 | containernetworking-plugins | 0 | 1:1.1.1-6.module_el8.9.0+3821+d7d58347 |
| AlmaLinux:8 | containernetworking-plugins | 0 | 1:1.3.0-8.module_el8.9.0+3717+81096349 |
| AlmaLinux:8 | containernetworking-plugins | 0 | 1:1.4.0-2.module_el8.10.0+3792+03eaed9c |
| AlmaLinux:8 | containers-common | 0 | 2:1-38.module_el8.9.0+3627+db8ec155 |
| AlmaLinux:8 | containers-common | 0 | 2:1-38.module_el8.9.0+3821+d7d58347 |
| AlmaLinux:8 | containers-common | 0 | 2:1-71.module_el8.9.0+3755+bc5f21db |
| AlmaLinux:8 | containers-common | 0 | 2:1-81.module_el8.10.0+3792+03eaed9c |
| AlmaLinux:8 | crit | 0 | 3.15-3.module_el8.6.0+2877+8e437bf5 |
| AlmaLinux:8 | crit | 0 | 3.15-3.module_el8.6.0+3137+d33c3efb |
| AlmaLinux:8 | crit | 0 | 3.18-4.module_el8.9.0+3755+bc5f21db |
| AlmaLinux:8 | crit | 0 | 3.18-5.module_el8.10.0+3845+87b84552 |
| AlmaLinux:8 | criu | 0 | 3.15-3.module_el8.9.0+3817+215c128b |
| AlmaLinux:8 | criu | 0 | 3.15-3.module_el8.9.0+3821+d7d58347 |
| AlmaLinux:8 | criu | 0 | 3.18-4.module_el8.9.0+3755+bc5f21db |
| AlmaLinux:8 | criu | 0 | 3.18-5.module_el8.10.0+3845+87b84552 |
| AlmaLinux:8 | criu-devel | 0 | 3.15-3.module_el8.6.0+2877+8e437bf5 |
| AlmaLinux:8 | criu-devel | 0 | 3.15-3.module_el8.9.0+3821+d7d58347 |
| AlmaLinux:8 | criu-devel | 0 | 3.18-4.module_el8.9.0+3717+81096349 |
| AlmaLinux:8 | criu-devel | 0 | 3.18-5.module_el8.10.0+3845+87b84552 |
| AlmaLinux:8 | criu-libs | 0 | 3.15-3.module_el8.9.0+3817+215c128b |
| AlmaLinux:8 | criu-libs | 0 | 3.15-3.module_el8.9.0+3821+d7d58347 |
| AlmaLinux:8 | criu-libs | 0 | 3.18-4.module_el8.9.0+3643+9234dc3b |
| AlmaLinux:8 | criu-libs | 0 | 3.18-5.module_el8.10.0+3845+87b84552 |
| AlmaLinux:8 | crun | 0 | 1.8.7-1.module_el8.9.0+3683+33eb0feb |
| AlmaLinux:8 | crun | 0 | 1.8.7-1.module_el8.9.0+3643+9234dc3b |
| AlmaLinux:8 | crun | 0 | 1.14.3-2.module_el8.10.0+3845+87b84552 |
| AlmaLinux:8 | fuse-overlayfs | 0 | 1.9-2.module_el8.9.0+3627+db8ec155 |
| AlmaLinux:8 | fuse-overlayfs | 0 | 1.9-2.module_el8.9.0+3821+d7d58347 |
| AlmaLinux:8 | fuse-overlayfs | 0 | 1.12-1.module_el8.9.0+3643+9234dc3b |
| AlmaLinux:8 | fuse-overlayfs | 0 | 1.13-1.module_el8.10.0+3792+03eaed9c |
| AlmaLinux:8 | libslirp | 0 | 4.4.0-1.module_el8.6.0+3137+d33c3efb |
| AlmaLinux:8 | libslirp | 0 | 4.4.0-1.module_el8.9.0+3821+d7d58347 |
| AlmaLinux:8 | libslirp | 0 | 4.4.0-1.module_el8.9.0+3717+81096349 |
| AlmaLinux:8 | libslirp | 0 | 4.4.0-2.module_el8.10.0+3845+87b84552 |
| AlmaLinux:8 | libslirp-devel | 0 | 4.4.0-1.module_el8.6.0+3137+d33c3efb |
| AlmaLinux:8 | libslirp-devel | 0 | 4.4.0-1.module_el8.9.0+3821+d7d58347 |
| AlmaLinux:8 | libslirp-devel | 0 | 4.4.0-1.module_el8.8.0+3615+3543c705 |
| AlmaLinux:8 | libslirp-devel | 0 | 4.4.0-2.module_el8.10.0+3845+87b84552 |
| AlmaLinux:8 | netavark | 0 | 2:1.0.1-38.module_el8.9.0+3627+db8ec155 |
| AlmaLinux:8 | netavark | 0 | 2:1.0.1-38.module_el8.9.0+3821+d7d58347 |
| AlmaLinux:8 | netavark | 0 | 2:1.7.0-2.module_el8.9.0+3717+81096349 |
| AlmaLinux:8 | netavark | 0 | 2:1.10.3-1.module_el8.10.0+3845+87b84552 |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 0 | 1.2.5-2.module_el8.8.0+3468+16b86c82 |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 0 | 1.2.5-2.module_el8.9.0+3821+d7d58347 |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 0 | 1.2.9-1.module_el8.9.0+3755+bc5f21db |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 0 | 1.2.10-1.module_el8.10.0+3792+03eaed9c |
| AlmaLinux:8 | podman | 0 | 2:4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1 |
| AlmaLinux:8 | podman | 0 | 3:4.6.1-9.module_el8.9.0+3823+03810114 |
| AlmaLinux:8 | podman | 0 | 4:4.9.4-1.module_el8.10.0+3845+87b84552 |
| AlmaLinux:8 | podman-catatonit | 0 | 2:4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1 |
| AlmaLinux:8 | podman-catatonit | 0 | 2:4.0.2-26.module_el8.9.0+3821+d7d58347.alma.1 |
| AlmaLinux:8 | podman-catatonit | 0 | 3:4.6.1-9.module_el8.9.0+3823+03810114 |
| AlmaLinux:8 | podman-catatonit | 0 | 4:4.9.4-1.module_el8.10.0+3845+87b84552 |
| AlmaLinux:8 | podman-docker | 0 | 2:4.0.2-26.module_el8.9.0+3821+d7d58347.alma.1 |
| AlmaLinux:8 | podman-docker | 0 | 3:4.6.1-9.module_el8.9.0+3823+03810114 |
| AlmaLinux:8 | podman-docker | 0 | 4:4.9.4-1.module_el8.10.0+3845+87b84552 |
| AlmaLinux:8 | podman-gvproxy | 0 | 2:4.0.2-26.module_el8.9.0+3821+d7d58347.alma.1 |
| AlmaLinux:8 | podman-gvproxy | 0 | 3:4.6.1-9.module_el8.9.0+3823+03810114 |
| AlmaLinux:8 | podman-gvproxy | 0 | 4:4.9.4-1.module_el8.10.0+3845+87b84552 |
| AlmaLinux:8 | podman-plugins | 0 | 2:4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1 |
| AlmaLinux:8 | podman-plugins | 0 | 3:4.6.1-9.module_el8.9.0+3823+03810114 |
| AlmaLinux:8 | podman-plugins | 0 | 4:4.9.4-1.module_el8.10.0+3845+87b84552 |
| AlmaLinux:8 | podman-remote | 0 | 2:4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1 |
| AlmaLinux:8 | podman-remote | 0 | 2:4.0.2-26.module_el8.9.0+3821+d7d58347.alma.1 |
| AlmaLinux:8 | podman-remote | 0 | 3:4.6.1-9.module_el8.9.0+3823+03810114 |
| AlmaLinux:8 | podman-remote | 0 | 4:4.9.4-1.module_el8.10.0+3845+87b84552 |
| AlmaLinux:8 | podman-tests | 0 | 2:4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1 |
| AlmaLinux:8 | podman-tests | 0 | 2:4.0.2-26.module_el8.9.0+3821+d7d58347.alma.1 |
| AlmaLinux:8 | podman-tests | 0 | 3:4.6.1-9.module_el8.9.0+3823+03810114 |
| AlmaLinux:8 | podman-tests | 0 | 4:4.9.4-1.module_el8.10.0+3845+87b84552 |
| AlmaLinux:8 | python3-criu | 0 | 3.15-3.module_el8.9.0+3821+d7d58347 |
| AlmaLinux:8 | python3-criu | 0 | 3.18-4.module_el8.9.0+3717+81096349 |
| AlmaLinux:8 | python3-criu | 0 | 3.18-5.module_el8.10.0+3845+87b84552 |
| AlmaLinux:8 | python3-podman | 0 | 4.0.0-2.module_el8.9.0+3821+d7d58347 |
| AlmaLinux:8 | python3-podman | 0 | 4.6.0-2.module_el8.9.0+3755+bc5f21db |
| AlmaLinux:8 | python3-podman | 0 | 4.9.0-1.module_el8.10.0+3792+03eaed9c |
| AlmaLinux:8 | runc | 0 | 1:1.1.12-1.module_el8.9.0+3722+7fd8ab2b |
| AlmaLinux:8 | runc | 0 | 1:1.1.12-1.module_el8.9.0+3812+085a32ca |
| AlmaLinux:8 | runc | 0 | 1:1.1.12-1.module_el8.9.0+3717+81096349 |
| AlmaLinux:8 | runc | 0 | 1:1.1.12-1.module_el8.10.0+3845+87b84552 |
| AlmaLinux:8 | skopeo | 0 | 2:1.6.2-9.module_el8.9.0+3687+dcd7ef8f.alma.1 |
| AlmaLinux:8 | skopeo | 0 | 2:1.6.2-9.module_el8.9.0+3821+d7d58347.alma.1 |
| AlmaLinux:8 | skopeo | 0 | 2:1.13.3-3.module_el8.9.0+3717+81096349 |
| AlmaLinux:8 | skopeo | 0 | 2:1.14.3-2.module_el8.10.0+3845+87b84552 |
| AlmaLinux:8 | skopeo-tests | 0 | 2:1.6.2-9.module_el8.9.0+3687+dcd7ef8f.alma.1 |
| AlmaLinux:8 | skopeo-tests | 0 | 2:1.6.2-9.module_el8.9.0+3812+085a32ca.alma.1 |
| AlmaLinux:8 | skopeo-tests | 0 | 2:1.13.3-3.module_el8.9.0+3717+81096349 |
| AlmaLinux:8 | skopeo-tests | 0 | 2:1.14.3-2.module_el8.10.0+3845+87b84552 |
| AlmaLinux:8 | slirp4netns | 0 | 1.1.8-3.module_el8.9.0+3821+d7d58347 |
| AlmaLinux:8 | slirp4netns | 0 | 1.2.1-1.module_el8.9.0+3643+9234dc3b |
| AlmaLinux:8 | slirp4netns | 0 | 1.2.3-1.module_el8.10.0+3845+87b84552 |
| AlmaLinux:8 | toolbox | 0 | 0.0.99.4-5.module_el8.9.0+3627+db8ec155 |
| AlmaLinux:8 | toolbox | 0 | 0.0.99.4-5.module_el8.9.0+3722+7fd8ab2b |
| AlmaLinux:8 | toolbox | 0 | 0.0.99.4-5.module_el8.9.0+3755+bc5f21db |
| AlmaLinux:8 | toolbox | 0 | 0.0.99.5-2.module_el8.10.0+3845+87b84552 |
| AlmaLinux:8 | toolbox-tests | 0 | 0.0.99.4-5.module_el8.9.0+3627+db8ec155 |
| AlmaLinux:8 | toolbox-tests | 0 | 0.0.99.4-5.module_el8.9.0+3755+bc5f21db |
| AlmaLinux:8 | toolbox-tests | 0 | 0.0.99.5-2.module_el8.10.0+3845+87b84552 |
| AlmaLinux:8 | udica | 0 | 0.2.6-4.module_el8.9.0+3821+d7d58347 |
| AlmaLinux:8 | udica | 0 | 0.2.6-20.module_el8.9.0+3755+bc5f21db |
| AlmaLinux:8 | udica | 0 | 0.2.6-21.module_el8.10.0+3845+87b84552 |
| AlmaLinux:9 | buildah | 0 | 1:1.31.5-1.el9_3 |
| AlmaLinux:9 | buildah-tests | 0 | 1:1.31.5-1.el9_3 |
| AlmaLinux:9 | podman | 0 | 4:4.9.4-3.el9_4 |
| AlmaLinux:9 | podman-docker | 0 | 4:4.9.4-3.el9_4 |
| AlmaLinux:9 | podman-plugins | 0 | 4:4.9.4-3.el9_4 |
| AlmaLinux:9 | podman-remote | 0 | 4:4.9.4-3.el9_4 |
| AlmaLinux:9 | podman-tests | 0 | 4:4.9.4-3.el9_4 |
| Chainguard | podman | 0 | 0 |
| Chainguard | podman-doc | 0 | 0 |
| Debian:11 | golang-github-containers-buildah | 0 | No fix |
| Debian:12 | golang-github-containers-buildah | 0 | No fix |
| Debian:13 | golang-github-containers-buildah | 0 | 1.33.7+ds1-1 |
| Mageia:9 | buildah | 0 | 1.37.4-1.mga9 |
| Mageia:9 | podman | 0 | 4.9.5-1.mga9 |
| Mageia:9 | skopeo | 0 | 1.16.1-1.mga9 |
| Red Hat:enterprise_linux:8::appstream | aardvark-dns | 0 | 2:1.0.1-38.module+el8.9.0+21673+408ce8ab |
| Red Hat:enterprise_linux:8::appstream | aardvark-dns | 0 | 2:1.7.0-1.module+el8.9.0+21697+6a5e98e7 |
| Red Hat:enterprise_linux:8::appstream | aardvark-dns | 0 | 2:1.10.0-1.module+el8.10.0+21209+52deeb51 |
| Red Hat:enterprise_linux:8::appstream | buildah | 0 | 1:1.24.7-1.module+el8.9.0+21673+408ce8ab |
| Red Hat:enterprise_linux:8::appstream | buildah | 0 | 1:1.31.5-1.module+el8.9.0+21697+6a5e98e7 |
| Red Hat:enterprise_linux:8::appstream | buildah | 0 | 2:1.33.7-1.module+el8.10.0+21590+d7d75709 |
| Red Hat:enterprise_linux:8::appstream | buildah-debuginfo | 0 | 1:1.24.7-1.module+el8.9.0+21673+408ce8ab |
| Red Hat:enterprise_linux:8::appstream | buildah-debuginfo | 0 | 1:1.31.5-1.module+el8.9.0+21697+6a5e98e7 |
| Red Hat:enterprise_linux:8::appstream | buildah-debuginfo | 0 | 2:1.33.7-1.module+el8.10.0+21590+d7d75709 |
| Red Hat:enterprise_linux:8::appstream | buildah-debugsource | 0 | 1:1.24.7-1.module+el8.9.0+21673+408ce8ab |
| Red Hat:enterprise_linux:8::appstream | buildah-debugsource | 0 | 1:1.31.5-1.module+el8.9.0+21697+6a5e98e7 |
| Red Hat:enterprise_linux:8::appstream | buildah-debugsource | 0 | 2:1.33.7-1.module+el8.10.0+21590+d7d75709 |
| Red Hat:enterprise_linux:8::appstream | buildah-tests | 0 | 1:1.24.7-1.module+el8.9.0+21673+408ce8ab |
| Red Hat:enterprise_linux:8::appstream | buildah-tests | 0 | 1:1.31.5-1.module+el8.9.0+21697+6a5e98e7 |
| Red Hat:enterprise_linux:8::appstream | buildah-tests | 0 | 2:1.33.7-1.module+el8.10.0+21590+d7d75709 |
| Red Hat:enterprise_linux:8::appstream | buildah-tests-debuginfo | 0 | 1:1.24.7-1.module+el8.9.0+21673+408ce8ab |
| Red Hat:enterprise_linux:8::appstream | buildah-tests-debuginfo | 0 | 1:1.31.5-1.module+el8.9.0+21697+6a5e98e7 |
| Red Hat:enterprise_linux:8::appstream | buildah-tests-debuginfo | 0 | 2:1.33.7-1.module+el8.10.0+21590+d7d75709 |
| Red Hat:enterprise_linux:8::appstream | cockpit-podman | 0 | 0:46-1.module+el8.9.0+21673+408ce8ab |
| Red Hat:enterprise_linux:8::appstream | cockpit-podman | 0 | 0:75-1.module+el8.9.0+21697+6a5e98e7 |
| Red Hat:enterprise_linux:8::appstream | cockpit-podman | 0 | 0:84.1-1.module+el8.10.0+21373+0d273fdf |
| Red Hat:enterprise_linux:8::appstream | conmon | 0 | 2:2.1.4-2.module+el8.9.0+21673+408ce8ab |
| Red Hat:enterprise_linux:8::appstream | conmon | 0 | 3:2.1.8-1.module+el8.9.0+21697+6a5e98e7 |
| Red Hat:enterprise_linux:8::appstream | conmon | 0 | 3:2.1.10-1.module+el8.10.0+21077+98b84d8a |
| Red Hat:enterprise_linux:8::appstream | conmon-debuginfo | 0 | 2:2.1.4-2.module+el8.9.0+21673+408ce8ab |
| Red Hat:enterprise_linux:8::appstream | conmon-debuginfo | 0 | 3:2.1.8-1.module+el8.9.0+21697+6a5e98e7 |
| Red Hat:enterprise_linux:8::appstream | conmon-debuginfo | 0 | 3:2.1.10-1.module+el8.10.0+21077+98b84d8a |
| Red Hat:enterprise_linux:8::appstream | conmon-debugsource | 0 | 2:2.1.4-2.module+el8.9.0+21673+408ce8ab |
| Red Hat:enterprise_linux:8::appstream | conmon-debugsource | 0 | 3:2.1.8-1.module+el8.9.0+21697+6a5e98e7 |
| Red Hat:enterprise_linux:8::appstream | conmon-debugsource | 0 | 3:2.1.10-1.module+el8.10.0+21077+98b84d8a |
| Red Hat:enterprise_linux:8::appstream | container-selinux | 0 | 2:2.205.0-3.module+el8.9.0+21673+408ce8ab |
| Red Hat:enterprise_linux:8::appstream | container-selinux | 0 | 2:2.229.0-1.module+el8.9.0+21697+6a5e98e7 |
| Red Hat:enterprise_linux:8::appstream | container-selinux | 0 | 2:2.229.0-2.module+el8.10.0+21196+3f0abbca |
| Red Hat:enterprise_linux:8::appstream | containernetworking-plugins | 0 | 1:1.1.1-6.module+el8.9.0+21673+408ce8ab |
| Red Hat:enterprise_linux:8::appstream | containernetworking-plugins | 0 | 1:1.3.0-8.module+el8.9.0+21697+6a5e98e7 |
| Red Hat:enterprise_linux:8::appstream | containernetworking-plugins | 0 | 1:1.4.0-2.module+el8.10.0+21366+f9cb49f8 |
| Red Hat:enterprise_linux:8::appstream | containernetworking-plugins-debuginfo | 0 | 1:1.1.1-6.module+el8.9.0+21673+408ce8ab |
| Red Hat:enterprise_linux:8::appstream | containernetworking-plugins-debuginfo | 0 | 1:1.3.0-8.module+el8.9.0+21697+6a5e98e7 |
| Red Hat:enterprise_linux:8::appstream | containernetworking-plugins-debuginfo | 0 | 1:1.4.0-2.module+el8.10.0+21366+f9cb49f8 |
| Red Hat:enterprise_linux:8::appstream | containernetworking-plugins-debugsource | 0 | 1:1.1.1-6.module+el8.9.0+21673+408ce8ab |
| Red Hat:enterprise_linux:8::appstream | containernetworking-plugins-debugsource | 0 | 1:1.3.0-8.module+el8.9.0+21697+6a5e98e7 |
| Red Hat:enterprise_linux:8::appstream | containernetworking-plugins-debugsource | 0 | 1:1.4.0-2.module+el8.10.0+21366+f9cb49f8 |
| Red Hat:enterprise_linux:8::appstream | containers-common | 0 | 2:1-38.module+el8.9.0+21673+408ce8ab |
| Red Hat:enterprise_linux:8::appstream | containers-common | 0 | 2:1-71.module+el8.9.0+21697+6a5e98e7 |
| Red Hat:enterprise_linux:8::appstream | containers-common | 0 | 2:1-81.module+el8.10.0+21340+c6c7475a |
| Red Hat:enterprise_linux:8::appstream | crit | 0 | 0:3.15-3.module+el8.9.0+21673+408ce8ab |
| Red Hat:enterprise_linux:8::appstream | crit | 0 | 0:3.18-4.module+el8.9.0+21697+6a5e98e7 |
| Red Hat:enterprise_linux:8::appstream | crit | 0 | 0:3.18-5.module+el8.10.0+21672+01ba06ae |
| Red Hat:enterprise_linux:8::appstream | criu | 0 | 0:3.15-3.module+el8.9.0+21673+408ce8ab |
| Red Hat:enterprise_linux:8::appstream | criu | 0 | 0:3.18-4.module+el8.9.0+21697+6a5e98e7 |
| Red Hat:enterprise_linux:8::appstream | criu | 0 | 0:3.18-5.module+el8.10.0+21672+01ba06ae |
| Red Hat:enterprise_linux:8::appstream | criu-debuginfo | 0 | 0:3.15-3.module+el8.9.0+21673+408ce8ab |
Related vulnerabilities
- CVE-2024-3056 A flaw was found in Podman. Also affects github.com/containers/podman/v4
- CVE-2023-0778 A Time-of-check Time-of-use (TOCTOU) flaw was found in podman. Also affects github.com/containers/podman/v4
- CVE-2025-47913 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and… Also affects aardvark-dns
- CVE-2025-52565 container escape due to /dev/console mount and related races Also affects aardvark-dns
- CVE-2025-31133 runc container escape via "masked path" abuse due to mount race conditions Also affects aardvark-dns
- CVE-2025-52881 runc container escape and denial of service due to arbitrary write gadgets and procfs… Also affects aardvark-dns
- CVE-2025-22871 The net/http package improperly accepts a bare LF as a line terminator in chunked data… Also affects aardvark-dns
- CVE-2024-9341 A flaw was found in Go. Also affects aardvark-dns