← CVE Intelligence

CVE-2024-11218

Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile PUBLISHED

Description (CNA)

A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and directories on the host.

Affected (CNA)

Vendor / productVersions
Not supplied / Not suppliedaffected 0 before 1.33.12; affected 1.35.0 before 1.35.5; affected 1.37.0 before 1.37.6; affected 1.38.0 before 1.38.1
Red Hat / Red Hat Enterprise Linux 8unaffected 8100020250124120243.afee755d before *
Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportunaffected 8060020250203202123.3b538bd8 before *
Red Hat / Red Hat Enterprise Linux 8.6 Telecommunications Update Serviceunaffected 8060020250203202123.3b538bd8 before *
Red Hat / Red Hat Enterprise Linux 8.6 Update Services for SAP Solutionsunaffected 8060020250203202123.3b538bd8 before *
Red Hat / Red Hat Enterprise Linux 8.8 Extended Update Supportunaffected 8080020250207173112.0f77c1b7 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 4:5.2.2-13.el9_5 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 2:1.37.6-1.el9_5 before *
Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutionsunaffected 2:4.2.0-6.el9_0 before *
Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutionsunaffected 1:1.26.9-1.el9_0 before *
Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Supportunaffected 1:1.29.5-1.el9_2 before *
Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Supportunaffected 2:4.4.1-22.el9_2 before *
Red Hat / Red Hat Enterprise Linux 9.4 Extended Update Supportunaffected 2:1.33.12-2.el9_4 before *
Red Hat / Red Hat Enterprise Linux 9.4 Extended Update Supportunaffected 4:4.9.4-17.el9_4 before *
Red Hat / Red Hat OpenShift Container Platform 4.12unaffected 412.86.202503052321-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.12unaffected 3:4.2.0-13.rhaos4.12.el9 before *
Red Hat / Red Hat OpenShift Container Platform 4.13unaffected 1:1.29.5-1.rhaos4.13.el8 before *
Red Hat / Red Hat OpenShift Container Platform 4.13unaffected 3:4.4.1-16.rhaos4.13.el8 before *
Red Hat / Red Hat OpenShift Container Platform 4.13unaffected 413.92.202503112237-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.14unaffected 3:4.4.1-22.rhaos4.14.el8 before *
Red Hat / Red Hat OpenShift Container Platform 4.14unaffected 1:1.29.5-1.rhaos4.14.el8 before *
Red Hat / Red Hat OpenShift Container Platform 4.14unaffected 414.92.202503100617-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.14unaffected 1:1.29.5-1.rhaos4.14.el8 before *
Red Hat / Red Hat OpenShift Container Platform 4.15unaffected 3:4.4.1-33.rhaos4.15.el8 before *
Red Hat / Red Hat OpenShift Container Platform 4.15unaffected 1:1.29.5-1.rhaos4.15.el8 before *
Red Hat / Red Hat OpenShift Container Platform 4.15unaffected 415.92.202503060749-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.15unaffected 1:1.29.5-1.rhaos4.15.el8 before *
Red Hat / Red Hat OpenShift Container Platform 4.16unaffected 4:4.9.4-13.rhaos4.16.el8 before *
Red Hat / Red Hat OpenShift Container Platform 4.16unaffected 2:1.33.12-1.rhaos4.16.el8 before *
Red Hat / Red Hat OpenShift Container Platform 4.16unaffected 416.94.202502180249-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.16unaffected 2:1.33.12-1.rhaos4.16.el8 before *
Red Hat / Red Hat OpenShift Container Platform 4.17unaffected 5:5.2.2-2.rhaos4.17.el8 before *
Red Hat / Red Hat OpenShift Container Platform 4.17unaffected 2:1.33.12-1.rhaos4.17.el8 before *
Red Hat / Red Hat OpenShift Container Platform 4.17unaffected 2:1.33.12-1.rhaos4.17.el8 before *
Red Hat / Red Hat OpenShift Container Platform 4.17unaffected 417.94.202504080421-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.18unaffected 2:1.33.12-1.rhaos4.18.el9 before *
Red Hat / Red Hat OpenShift Container Platform 4.18unaffected 418.94.202504021150-0 before *
Red Hat / Red Hat Enterprise Linux 10unaffected
Red Hat / Red Hat Enterprise Linux 10affected

CWE

CWE-269

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.