CVE-2024-9676

A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to hang and result in a denial of service via OOM kill when running a malicious image using an automatically assigned user namespace (--userns=auto in Podman and Buildah). The containers/storage library will read /etc/passwd inside the container, but does not properly validate if that file is a symlink, which can be used to cause the library to read an arbitrary file on the host.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/9xxx/CVE-2024-9676.json",
    "cwe_ids": [
        "CWE-22"
    ],
    "cna_assigner": "redhat"
}

References

Affected packages

Git / github.com/containers/storage

Affected ranges

Type: GIT
Repo: https://github.com/containers/storage
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

c31627e1bf586b0c4a633bf73af466ca9cb52d4a

Affected versions

V1.*

V1.2

Other

v1.*

v1.1

v1.11

v1.12.0

v1.12.1

v1.12.2

v1.12.4

v1.12.5

v1.12.9

v1.13.2

v1.15.7

v1.23.0

v1.50.0

v1.55.0

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-9676.json"