← לוח פגיעויות

CVE-2024-9675

בינונית 4.4

תיאור (מקור, אנגלית)

A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the host (read/write) into the container as long as those files can be accessed by the user running Buildah.

מדדים

CVSS 3.1
4.4 (MEDIUM) מקור הציון: NVD CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
EPSS — סבירות ניצול
0% (אחוזון 000) נכון ל-19/9/2026
CWE
CWE-22

מוצרים מושפעים

buildah_project: buildah; redhat: openshift container platform; redhat: enterprise linux; redhat: enterprise linux eus; redhat: enterprise linux for arm 64; redhat: enterprise linux for arm 64 eus; redhat: enterprise linux for ibm z systems; redhat: enterprise linux for ibm z systems eus; redhat: enterprise linux for power little endian; redhat: enterprise linux for power little endian eus; redhat: enterprise linux server aus; redhat: enterprise linux server for power little endian update services for sap solutions; redhat: enterprise linux server tus; redhat: enterprise linux update services for sap solutions

קישורים