AZL-55959
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-55959.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-55959
- Upstream
- Published
- 2025-01-22T05:15:08Z
- Modified
- 2026-04-01T05:18:46.888533Z
- Summary
- CVE-2024-11218 affecting package buildah for versions less than 1.41.4-2
- Details
-
A vulnerability was found in
podman buildandbuildah.This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and directories on the host. - References