Common vulnerabilities and Exposures (CVE)

Skip to main content

Required CVE Record Information

Description

A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and directories on the host.

CVSS 1 Total

Learn more
ScoreSeverityVersionVector String
8.6HIGH3.1CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Product Status

Learn more

Versions 4 Total

Default Status: unaffected

affected

  • affected from 0 before 1.33.12 
  • affected from 1.35.0 before 1.35.5 
  • affected from 1.37.0 before 1.37.6 
  • affected from 1.38.0 before 1.38.1 

Versions 1 Total

Default Status: affected

unaffected

  • unaffected from 8100020250124120243.afee755d 

Versions 1 Total

Default Status: affected

unaffected

  • unaffected from 8060020250203202123.3b538bd8 

Versions 1 Total

Default Status: affected

unaffected

  • unaffected from 8060020250203202123.3b538bd8 

Versions 1 Total

Default Status: affected

unaffected

  • unaffected from 8060020250203202123.3b538bd8 

Versions 1 Total

Default Status: affected

unaffected

  • unaffected from 8080020250207173112.0f77c1b7 

Versions 1 Total

Default Status: affected

unaffected

  • unaffected from 4:5.2.2-13.el9_5 

Versions 1 Total

Default Status: affected

unaffected

  • unaffected from 2:1.37.6-1.el9_5 

Versions 1 Total

Default Status: affected

unaffected

  • unaffected from 2:4.2.0-6.el9_0 

Versions 1 Total

Default Status: affected

unaffected

  • unaffected from 1:1.26.9-1.el9_0 

Versions 1 Total

Default Status: affected

unaffected

  • unaffected from 1:1.29.5-1.el9_2 

Versions 1 Total

Default Status: affected

unaffected

  • unaffected from 2:4.4.1-22.el9_2 

Versions 1 Total

Default Status: affected

unaffected

  • unaffected from 2:1.33.12-2.el9_4 

Versions 1 Total

Default Status: affected

unaffected

  • unaffected from 4:4.9.4-17.el9_4 

Versions 1 Total

Default Status: affected

unaffected

  • unaffected from 412.86.202503052321-0 

Versions 1 Total

Default Status: affected

unaffected

  • unaffected from 3:4.4.1-9.rhaos4.12.el8 

Versions 1 Total

Default Status: affected

unaffected

  • unaffected from 1:1.29.5-1.rhaos4.13.el8 

Versions 1 Total

Default Status: affected

unaffected

  • unaffected from 3:4.4.1-16.rhaos4.13.el8 

Versions 1 Total

Default Status: affected

unaffected

  • unaffected from 413.92.202503112237-0 

Versions 1 Total

Default Status: affected

unaffected

  • unaffected from 3:4.4.1-22.rhaos4.14.el8 

Versions 1 Total

Default Status: affected

unaffected

  • unaffected from 1:1.29.5-1.rhaos4.14.el8 

Versions 1 Total

Default Status: affected

unaffected

  • unaffected from 414.92.202503100617-0 

Versions 1 Total

Default Status: affected

unaffected

  • unaffected from 3:4.4.1-33.rhaos4.15.el8 

Versions 1 Total

Default Status: affected

unaffected

  • unaffected from 1:1.29.5-1.rhaos4.15.el8 

Versions 1 Total

Default Status: affected

unaffected

  • unaffected from 415.92.202503060749-0 

Versions 1 Total

Default Status: affected

unaffected

  • unaffected from 4:4.9.4-15.rhaos4.16.el9 

Versions 1 Total

Default Status: affected

unaffected

  • unaffected from 2:1.33.12-1.rhaos4.16.el8 

Versions 1 Total

Default Status: affected

unaffected

  • unaffected from 416.94.202502180249-0 

Versions 1 Total

Default Status: affected

unaffected

  • unaffected from 5:5.2.2-2.rhaos4.17.el8 

Versions 1 Total

Default Status: affected

unaffected

  • unaffected from 2:1.33.12-1.rhaos4.17.el8 

Versions 1 Total

Default Status: affected

unaffected

  • unaffected from 417.94.202504080421-0 

Versions 1 Total

Default Status: affected

unaffected

  • unaffected from 2:1.33.12-1.rhaos4.18.el9 

Versions 1 Total

Default Status: affected

unaffected

  • unaffected from 418.94.202504021150-0 

Versions 0 Total

Default Status: All versions are affected

References 31 Total

Authorized Data Publishers

Learn more