CVE-2024-11218

EUVD-2025-0135
A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and directories on the host.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.6 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 37%
Debian logo
Debian Releases
Debian Product
Codename
golang-github-containers-buildah
bookworm
no-dsa
bullseye
no-dsa
forky
1.42.1+ds1-2
fixed
sid
1.42.1+ds1-2
fixed
trixie
1.39.3+ds1-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
podman
focal
dne
jammy
dne
noble
dne
oracular
dne
plucky
needs-triage
questing
needs-triage
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
buildah
suse enterprise sap 15 SP6
1.35.5-150500.3.25.1
fixed
suse enterprise sap 15 SP7
1.35.5-150500.3.25.1
fixed
suse enterprise server 15 SP3
1.35.5-150300.8.31.2
fixed
suse enterprise server 15 SP4
1.35.5-150400.3.36.1
fixed
suse enterprise server 15 SP6
1.35.5-150500.3.25.1
fixed
suse enterprise server 15 SP7
1.35.5-150500.3.25.1
fixed
podman
suse enterprise sap 15 SP6
4.9.5-150500.3.31.1
fixed
suse enterprise sap 15 SP7
4.9.5-150500.3.31.1
fixed
suse enterprise server 15 SP3
4.9.5-150300.9.43.1
fixed
suse enterprise server 15 SP4
4.9.5-150400.4.35.1
fixed
suse enterprise server 15 SP5
4.9.5-150500.3.31.1
fixed
suse enterprise server 15 SP6
4.9.5-150500.3.31.1
fixed
suse enterprise server 15 SP7
4.9.5-150500.3.31.1
fixed
podman-docker
suse enterprise sap 15 SP6
4.9.5-150500.3.31.1
fixed
suse enterprise sap 15 SP7
4.9.5-150500.3.31.1
fixed
suse enterprise server 15 SP4
4.9.5-150400.4.35.1
fixed
suse enterprise server 15 SP5
4.9.5-150500.3.31.1
fixed
suse enterprise server 15 SP6
4.9.5-150500.3.31.1
fixed
suse enterprise server 15 SP7
4.9.5-150500.3.31.1
fixed
podman-remote
suse enterprise sap 15 SP6
4.9.5-150500.3.31.1
fixed
suse enterprise sap 15 SP7
4.9.5-150500.3.31.1
fixed
suse enterprise server 15 SP3
4.9.5-150300.9.43.1
fixed
suse enterprise server 15 SP4
4.9.5-150400.4.35.1
fixed
suse enterprise server 15 SP5
4.9.5-150500.3.31.1
fixed
suse enterprise server 15 SP6
4.9.5-150500.3.31.1
fixed
suse enterprise server 15 SP7
4.9.5-150500.3.31.1
fixed
podmansh
suse enterprise sap 15 SP6
4.9.5-150500.3.31.1
fixed
suse enterprise sap 15 SP7
4.9.5-150500.3.31.1
fixed
suse enterprise server 15 SP5
4.9.5-150500.3.31.1
fixed
suse enterprise server 15 SP6
4.9.5-150500.3.31.1
fixed
suse enterprise server 15 SP7
4.9.5-150500.3.31.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
buildah
RHEL 9
2:1.37.6-1.el9_5
fixed
buildah-tests
RHEL 9
2:1.37.6-1.el9_5
fixed
podman
RHEL 9
4:5.2.2-13.el9_5
fixed
podman-docker
RHEL 9
4:5.2.2-13.el9_5
fixed
podman-plugins
RHEL 9
4:5.2.2-13.el9_5
fixed
podman-remote
RHEL 9
4:5.2.2-13.el9_5
fixed
podman-tests
RHEL 9
4:5.2.2-13.el9_5
fixed
References