CVE-2024-9676

MEDIUM EPSS 67.9%
Published Oct 15, 20241y ago · Modified Jun 17, 20261w ago
6.5 CVSS 3.1
Medium
Find Similar
Published Oct 15, 2024 1y ago
Last Modified Jun 17, 2026 1w ago

Description

A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to hang and result in a denial of service via OOM kill when running a malicious image using an automatically assigned user namespace (`--userns=auto` in Podman and Buildah). The containers/storage library will read /etc/passwd inside the container, but does not properly validate if that file is a symlink, which can be used to cause the library to read an arbitrary file on the host.

CVSS Details

Base Score
6.5
Exploitability
2.8
Impact
3.6
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Network
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
67.9% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-22 Path Traversal Resource Mgmt

Affected Products 36

VendorProductVersionRange
redhatopenshift_container_platform4.12any
redhatopenshift_container_platform4.13any
redhatopenshift_container_platform4.14any
redhatopenshift_container_platform4.15any
redhatopenshift_container_platform4.16any
redhatopenshift_container_platform4.17any
redhatopenshift_container_platform_for_arm644.12any
redhatopenshift_container_platform_for_arm644.13any
redhatopenshift_container_platform_for_arm644.14any
redhatopenshift_container_platform_for_arm644.15any
redhatopenshift_container_platform_for_arm644.16any
redhatopenshift_container_platform_for_ibm_z4.12any
redhatopenshift_container_platform_for_ibm_z4.13any
redhatopenshift_container_platform_for_ibm_z4.14any
redhatopenshift_container_platform_for_ibm_z4.15any
redhatopenshift_container_platform_for_ibm_z4.16any
redhatopenshift_container_platform_for_linuxone4.12any
redhatopenshift_container_platform_for_linuxone4.13any
redhatopenshift_container_platform_for_linuxone4.14any
redhatopenshift_container_platform_for_linuxone4.15any
redhatopenshift_container_platform_for_linuxone4.16any
redhatopenshift_container_platform_for_power4.12any
redhatopenshift_container_platform_for_power4.13any
redhatopenshift_container_platform_for_power4.14any
redhatopenshift_container_platform_for_power4.15any
redhatopenshift_container_platform_for_power4.16any
redhatenterprise_linux9.0any
redhatenterprise_linux_eus9.4any
redhatenterprise_linux_for_arm_649.0_aarch64any
redhatenterprise_linux_for_arm_64_eus9.4_aarch64any
redhatenterprise_linux_for_ibm_z_systems9.0_s390xany
redhatenterprise_linux_for_ibm_z_systems_eus9.4_s390xany
redhatenterprise_linux_for_power_little_endian9.0_ppc64leany
redhatenterprise_linux_for_power_little_endian_eus9.4_ppc64leany
redhatenterprise_linux_server_aus9.4any
redhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions9.4_ppc64leany

References 21

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.