CVE-2024-9676
Medium
Description
A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to hang and result in a denial of service via OOM kill when running a malicious image using an automatically assigned user namespace (`--userns=auto` in Podman and Buildah). The containers/storage library will read /etc/passwd inside the container, but does not properly validate if that file is a symlink, which can be used to cause the library to read an arbitrary file on the host.
SeverityMedium
CVSS6.5
Exploit probability—
Product
Redhat Openshift Container Platform
PublishedOct 15, 2024
First seenOct 15, 2024
Weakness typeCWE-22Path traversal
How to fix
Vendor advisories
- access.redhat.com/errata/RHSA-2024:8418
- access.redhat.com/errata/RHSA-2024:8428
- access.redhat.com/errata/RHSA-2024:8437
- access.redhat.com/errata/RHSA-2024:8686
- access.redhat.com/errata/RHSA-2024:8690
- access.redhat.com/errata/RHSA-2024:8694
- access.redhat.com/errata/RHSA-2024:8700
- access.redhat.com/errata/RHSA-2024:8984
- access.redhat.com/errata/RHSA-2024:9051
- access.redhat.com/errata/RHSA-2024:9454
- access.redhat.com/errata/RHSA-2024:9459
- access.redhat.com/errata/RHSA-2024:9926
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat openshift_container_platform | 4.12, 4.13, 4.14, 4.15, 4.16, 4.17 | — |
| redhat openshift_container_platform_for_arm64 | 4.12, 4.13, 4.14, 4.15, 4.16 | — |
| redhat openshift_container_platform_for_ibm_z | 4.12, 4.13, 4.14, 4.15, 4.16 | — |
| redhat openshift_container_platform_for_linuxone | 4.12, 4.13, 4.14, 4.15, 4.16 | — |
| redhat openshift_container_platform_for_power | 4.12, 4.13, 4.14, 4.15, 4.16 | — |
| redhat enterprise_linux | 9.0 | — |
| redhat enterprise_linux_eus | 9.4 | — |
| redhat enterprise_linux_for_arm_64 | 9.0_aarch64 | — |
| redhat enterprise_linux_for_arm_64_eus | 9.4_aarch64 | — |
| redhat enterprise_linux_for_ibm_z_systems | 9.0_s390x | — |
| redhat enterprise_linux_for_ibm_z_systems_eus | 9.4_s390x | — |
| redhat enterprise_linux_for_power_little_endian | 9.0_ppc64le | — |
| redhat enterprise_linux_for_power_little_endian_eus | 9.4_ppc64le | — |
| redhat enterprise_linux_server_aus | 9.4 | — |
| redhat enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions | 9.4_ppc64le | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.