6.5
MEDIUM
CVSS 3.1
CVE-2024-9676
Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)
Overview
Description
A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to hang and result in a denial of service via OOM kill when running a malicious image using an automatically assigned user namespace (`--userns=auto` in Podman and Buildah). The containers/storage library will read /etc/passwd inside the container, but does not properly validate if that file is a symlink, which can be used to cause the library to read an arbitrary file on the host.
Details
INFO
Published Date :
Oct. 15, 2024, 4:15 p.m.
Last Modified :
Oct. 30, 2026, 7:17 p.m.
Remotely Exploit :
Yes !
Source :
[email protected]
Impact
Affected Products
The following products are affected by CVE-2024-9676
vulnerability.
Even if cvefeed.io is aware of the exact versions of the
products
that
are
affected, the information is not represented in the table below.
Scoring
CVSS Scores
The Common Vulnerability Scoring System is a standardized framework
for assessing the severity of vulnerabilities in software and systems.
We collect and displays CVSS scores from various sources for each CVE.
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | |||||
| CVSS 3.1 | MEDIUM | [email protected] | ||||
| CVSS 3.1 | MEDIUM | [email protected] |
Solution
This addresses a symlink traversal vulnerability in Podman, Buildah, and CRI-O, preventing denial of service.
- Update Podman, Buildah, and CRI-O packages to address the vulnerability.
- If applicable, update the associated OpenShift Container Platform packages.
References
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2024-9676.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2024-9676 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2024-9676
weaknesses.
CAPEC-64: Using Slashes and URL Encoding Combined to Bypass Validation Logic Using Slashes and URL Encoding Combined to Bypass Validation Logic
CAPEC-76: Manipulating Web Input to File System Calls Manipulating Web Input to File System Calls
CAPEC-78: Using Escaped Slashes in Alternate Encoding Using Escaped Slashes in Alternate Encoding
CAPEC-79: Using Slashes in Alternate Encoding Using Slashes in Alternate Encoding
CAPEC-126: Path Traversal Path Traversal
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2024-9676 vulnerability anywhere in the article.
-
tripwire.com
VERT Threat Alert: February 2025 Patch Tuesday Analysis
Today’s VERT Alert addresses Microsoft’s February 2025 Security Updates. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-1143 as soon as coverage is completed.I ... Read more
Published Date:
Feb 11, 2025 (1 year, 8 months ago)
The following table lists the changes that have been made to the
CVE-2024-9676 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Modified by [email protected]
Oct. 30, 2026
Action Type Old Value New Value Added Affected Affected value modified. <a href="https://github.com/CVEProject/cvelistV5/blob/main/cves/2024/9xxx/CVE-2024-9676.json">CVE-2024-9676</a> Added Reference https://access.redhat.com/errata/RHEA-2024:6126 Added Reference https://access.redhat.com/errata/RHSA-2024:10289 Added Reference https://access.redhat.com/errata/RHSA-2024:8418 Added Reference https://access.redhat.com/errata/RHSA-2024:8428 Added Reference https://access.redhat.com/errata/RHSA-2024:8437 Added Reference https://access.redhat.com/errata/RHSA-2024:8686 Added Reference https://access.redhat.com/errata/RHSA-2024:8690 Added Reference https://access.redhat.com/errata/RHSA-2024:8694 Added Reference https://access.redhat.com/errata/RHSA-2024:8700 Added Reference https://access.redhat.com/errata/RHSA-2024:8984 Added Reference https://access.redhat.com/errata/RHSA-2024:9051 Added Reference https://access.redhat.com/errata/RHSA-2024:9454 Added Reference https://access.redhat.com/errata/RHSA-2024:9459 Added Reference https://access.redhat.com/errata/RHSA-2024:9926 Added Reference https://access.redhat.com/errata/RHSA-2025:0876 Added Reference https://access.redhat.com/errata/RHSA-2025:2454 Added Reference https://access.redhat.com/errata/RHSA-2025:2710 Added Reference https://access.redhat.com/errata/RHSA-2025:3301 Added Reference https://access.redhat.com/security/cve/CVE-2024-9676 Added Reference https://bugzilla.redhat.com/show_bug.cgi?id=2317467 Added Reference https://github.com/advisories/GHSA-wq2p-5pc6-wpgf Added Reference https://github.com/containers/storage/commit/935c58f4b3e364a9c9d33ed06476a831e6ad5679 Removed Reference https://access.redhat.com/errata/RHSA-2024:10289 Removed Reference https://access.redhat.com/errata/RHSA-2024:8418 Removed Reference https://access.redhat.com/errata/RHSA-2024:8428 Removed Reference https://access.redhat.com/errata/RHSA-2024:8437 Removed Reference https://access.redhat.com/errata/RHSA-2024:8686 Removed Reference https://access.redhat.com/errata/RHSA-2024:8690 Removed Reference https://access.redhat.com/errata/RHSA-2024:8694 Removed Reference https://access.redhat.com/errata/RHSA-2024:8700 Removed Reference https://access.redhat.com/errata/RHSA-2024:8984 Removed Reference https://access.redhat.com/errata/RHSA-2024:9051 Removed Reference https://access.redhat.com/errata/RHSA-2024:9454 Removed Reference https://access.redhat.com/errata/RHSA-2024:9459 Removed Reference https://access.redhat.com/errata/RHSA-2024:9926 Removed Reference https://access.redhat.com/errata/RHSA-2025:0876 Removed Reference https://access.redhat.com/errata/RHSA-2025:2454 Removed Reference https://access.redhat.com/errata/RHSA-2025:2710 Removed Reference https://access.redhat.com/errata/RHSA-2025:3301 Removed Reference https://access.redhat.com/security/cve/CVE-2024-9676 Removed Reference https://bugzilla.redhat.com/show_bug.cgi?id=2317467 Removed Reference https://github.com/advisories/GHSA-wq2p-5pc6-wpgf Removed Reference https://github.com/containers/storage/commit/935c58f4b3e364a9c9d33ed06476a831e6ad5679 Removed Reference Type https://access.redhat.com/errata/RHSA-2024:8418 Types: Vendor Advisory Removed Reference Type https://access.redhat.com/errata/RHSA-2024:8428 Types: Vendor Advisory Removed Reference Type https://access.redhat.com/errata/RHSA-2024:8437 Types: Vendor Advisory Removed Reference Type https://access.redhat.com/errata/RHSA-2024:8686 Types: Vendor Advisory Removed Reference Type https://access.redhat.com/errata/RHSA-2024:8690 Types: Vendor Advisory Removed Reference Type https://access.redhat.com/errata/RHSA-2024:8694 Types: Vendor Advisory Removed Reference Type https://access.redhat.com/errata/RHSA-2024:8700 Types: Vendor Advisory Removed Reference Type https://access.redhat.com/errata/RHSA-2024:8984 Types: Vendor Advisory Removed Reference Type https://access.redhat.com/errata/RHSA-2024:9051 Types: Vendor Advisory Removed Reference Type https://access.redhat.com/errata/RHSA-2024:9454 Types: Vendor Advisory Removed Reference Type https://access.redhat.com/errata/RHSA-2024:9459 Types: Vendor Advisory Removed Reference Type https://access.redhat.com/errata/RHSA-2024:9926 Types: Vendor Advisory Removed Reference Type https://access.redhat.com/security/cve/CVE-2024-9676 Types: Vendor Advisory Removed Reference Type https://bugzilla.redhat.com/show_bug.cgi?id=2317467 Types: Issue Tracking Removed Reference Type https://github.com/advisories/GHSA-wq2p-5pc6-wpgf Types: Third Party Advisory -
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
Jun. 17, 2026
Action Type Old Value New Value Added SSVC {'id': 'CVE-2024-9676', 'role': 'CISA Coordinator', 'options': [{'exploitation': 'none'}, {'automatable': 'no'}, {'technicalImpact': 'partial'}], 'version': '2.0.3', 'timestamp': '2024-10-15T15:45:48.644647Z'} -
CVE Modified by [email protected]
Jun. 17, 2026
Action Type Old Value New Value Added Affected [{'versions': [{'status': 'affected', 'version': '0', 'lessThan': '1.55.1', 'versionType': 'semver'}], 'packageName': 'containers/storage', 'collectionURL': 'https://github.com/containers/storage/', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:8::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 8', 'versions': [{'status': 'unaffected', 'version': '8100020241101101019.afee755d', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'container-tools:rhel8', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:9::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 9', 'versions': [{'status': 'unaffected', 'version': '4:4.9.4-16.el9_4', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'podman', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:9::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 9', 'versions': [{'status': 'unaffected', 'version': '4:5.2.2-9.el9_5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'podman', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:9::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 9', 'versions': [{'status': 'unaffected', 'version': '2:1.37.5-1.el9_5', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'buildah', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_eus:9.4::appstream'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 9.4 Extended Update Support', 'versions': [{'status': 'unaffected', 'version': '2:1.33.11-1.el9_4', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'buildah', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.12::el8', 'cpe:/a:redhat:openshift:4.12::el9', 'cpe:/a:redhat:openshift_ironic:4.12::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.12', 'versions': [{'status': 'unaffected', 'version': '0:1.25.5-30.rhaos4.12.git53dc492.el8', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'cri-o', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.13::el8', 'cpe:/a:redhat:openshift:4.13::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.13', 'versions': [{'status': 'unaffected', 'version': '0:1.26.5-26.rhaos4.13.giteb3d487.el8', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'cri-o', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.14::el8', 'cpe:/a:redhat:openshift:4.14::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.14', 'versions': [{'status': 'unaffected', 'version': '0:1.27.8-12.rhaos4.14.git7597c43.el8', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'cri-o', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.14::el8', 'cpe:/a:redhat:openshift:4.14::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.14', 'versions': [{'status': 'unaffected', 'version': 'v4.14.0-202503060906.p0.gb03f3f5.assembly.stream.el8', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'openshift4/ose-docker-builder', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.15::el8', 'cpe:/a:redhat:openshift:4.15::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.15', 'versions': [{'status': 'unaffected', 'version': '0:1.28.11-5.rhaos4.15.git35a2431.el8', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'cri-o', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.15::el8', 'cpe:/a:redhat:openshift:4.15::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.15', 'versions': [{'status': 'unaffected', 'version': 'v4.15.0-202503060734.p0.gbc0b789.assembly.stream.el8', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'openshift4/ose-docker-builder', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift_ironic:4.16::el9', 'cpe:/a:redhat:openshift:4.16::el9', 'cpe:/a:redhat:openshift:4.16::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.16', 'versions': [{'status': 'unaffected', 'version': '0:1.29.9-6.rhaos4.16.gite7bd45a.el8', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'cri-o', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.16::el9', 'cpe:/a:redhat:openshift:4.16::el8'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.16', 'versions': [{'status': 'unaffected', 'version': '4:4.9.4-12.rhaos4.16.el8', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'podman', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.16::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.16', 'versions': [{'status': 'unaffected', 'version': 'v4.16.0-202503121138.p0.g31c3c26.assembly.stream.el9', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'openshift4/ose-docker-builder-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.17::el8', 'cpe:/a:redhat:openshift:4.17::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.17', 'versions': [{'status': 'unaffected', 'version': '0:1.30.6-6.rhaos4.17.git6ac6e96.el8', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'cri-o', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.17::el8', 'cpe:/a:redhat:openshift:4.17::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.17', 'versions': [{'status': 'unaffected', 'version': '5:5.2.2-1.rhaos4.17.el8', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'podman', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4.17::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4.17', 'versions': [{'status': 'unaffected', 'version': 'v4.17.0-202501281204.p0.ga753153.assembly.stream.el9', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'openshift4/ose-docker-builder-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ocp_tools'], 'vendor': 'Red Hat', 'product': 'OpenShift Developer Tools and Services', 'packageName': 'jenkins-agent-base-rhel9-container', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ocp_tools'], 'vendor': 'Red Hat', 'product': 'OpenShift Developer Tools and Services', 'packageName': 'ocp-tools-4/jenkins-agent-base-rhel8', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ocp_tools'], 'vendor': 'Red Hat', 'product': 'OpenShift Developer Tools and Services', 'packageName': 'ocp-tools-4/jenkins-rhel8', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:10'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 10', 'packageName': 'buildah', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:10'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 10', 'packageName': 'podman', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:10'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 10', 'packageName': 'skopeo', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:9'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 9', 'packageName': 'conmon', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:9'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 9', 'packageName': 'skopeo', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:openshift:4'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4', 'packageName': 'buildah', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:openshift:4'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4', 'packageName': 'conmon', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/a:redhat:openshift:4'], 'vendor': 'Red Hat', 'product': 'Red Hat OpenShift Container Platform 4', 'packageName': 'skopeo', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:quay:3'], 'vendor': 'Red Hat', 'product': 'Red Hat Quay 3', 'packageName': 'quay/quay-builder-rhel8', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}] -
CVE Modified by [email protected]
Mar. 19, 2026
Action Type Old Value New Value Added Reference https://github.com/containers/storage/commit/935c58f4b3e364a9c9d33ed06476a831e6ad5679 -
CVE Modified by [email protected]
Apr. 03, 2025
Action Type Old Value New Value Added Reference https://access.redhat.com/errata/RHSA-2025:3301 -
CVE Modified by [email protected]
Mar. 20, 2025
Action Type Old Value New Value Added Reference https://access.redhat.com/errata/RHSA-2025:2710 -
CVE Modified by [email protected]
Mar. 13, 2025
Action Type Old Value New Value Added Reference https://access.redhat.com/errata/RHSA-2025:2454 -
CVE Modified by [email protected]
Feb. 07, 2025
Action Type Old Value New Value Added Reference https://access.redhat.com/errata/RHSA-2025:0876 -
CVE Modified by [email protected]
Nov. 26, 2024
Action Type Old Value New Value Added Reference https://access.redhat.com/errata/RHSA-2024:10289 -
Initial Analysis by [email protected]
Nov. 25, 2024
Action Type Old Value New Value Added CVSS V3.1 NIST AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Added CPE Configuration OR *cpe:2.3:a:redhat:openshift_container_platform:4.12:*:*:*:*:*:*:* *cpe:2.3:a:redhat:openshift_container_platform:4.13:*:*:*:*:*:*:* *cpe:2.3:a:redhat:openshift_container_platform:4.14:*:*:*:*:*:*:* *cpe:2.3:a:redhat:openshift_container_platform:4.15:*:*:*:*:*:*:* *cpe:2.3:a:redhat:openshift_container_platform:4.16:*:*:*:*:*:*:* *cpe:2.3:a:redhat:openshift_container_platform:4.17:*:*:*:*:*:*:* *cpe:2.3:a:redhat:openshift_container_platform_for_arm64:4.12:*:*:*:*:*:*:* *cpe:2.3:a:redhat:openshift_container_platform_for_arm64:4.13:*:*:*:*:*:*:* *cpe:2.3:a:redhat:openshift_container_platform_for_arm64:4.14:*:*:*:*:*:*:* *cpe:2.3:a:redhat:openshift_container_platform_for_arm64:4.15:*:*:*:*:*:*:* *cpe:2.3:a:redhat:openshift_container_platform_for_arm64:4.16:*:*:*:*:*:*:* *cpe:2.3:a:redhat:openshift_container_platform_for_ibm_z:4.12:*:*:*:*:*:*:* *cpe:2.3:a:redhat:openshift_container_platform_for_ibm_z:4.13:*:*:*:*:*:*:* *cpe:2.3:a:redhat:openshift_container_platform_for_ibm_z:4.14:*:*:*:*:*:*:* *cpe:2.3:a:redhat:openshift_container_platform_for_ibm_z:4.15:*:*:*:*:*:*:* *cpe:2.3:a:redhat:openshift_container_platform_for_ibm_z:4.16:*:*:*:*:*:*:* *cpe:2.3:a:redhat:openshift_container_platform_for_linuxone:4.12:*:*:*:*:*:*:* *cpe:2.3:a:redhat:openshift_container_platform_for_linuxone:4.13:*:*:*:*:*:*:* *cpe:2.3:a:redhat:openshift_container_platform_for_linuxone:4.14:*:*:*:*:*:*:* *cpe:2.3:a:redhat:openshift_container_platform_for_linuxone:4.15:*:*:*:*:*:*:* *cpe:2.3:a:redhat:openshift_container_platform_for_linuxone:4.16:*:*:*:*:*:*:* *cpe:2.3:a:redhat:openshift_container_platform_for_power:4.12:*:*:*:*:*:*:* *cpe:2.3:a:redhat:openshift_container_platform_for_power:4.13:*:*:*:*:*:*:* *cpe:2.3:a:redhat:openshift_container_platform_for_power:4.14:*:*:*:*:*:*:* *cpe:2.3:a:redhat:openshift_container_platform_for_power:4.15:*:*:*:*:*:*:* *cpe:2.3:a:redhat:openshift_container_platform_for_power:4.16:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_eus:9.4:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.0_aarch64:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.4_aarch64:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.4_s390x:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.4_ppc64le:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server_aus:9.4:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.4_ppc64le:*:*:*:*:*:*:* Changed Reference Type https://access.redhat.com/errata/RHSA-2024:8418 No Types Assigned https://access.redhat.com/errata/RHSA-2024:8418 Vendor Advisory Changed Reference Type https://access.redhat.com/errata/RHSA-2024:8428 No Types Assigned https://access.redhat.com/errata/RHSA-2024:8428 Vendor Advisory Changed Reference Type https://access.redhat.com/errata/RHSA-2024:8437 No Types Assigned https://access.redhat.com/errata/RHSA-2024:8437 Vendor Advisory Changed Reference Type https://access.redhat.com/errata/RHSA-2024:8686 No Types Assigned https://access.redhat.com/errata/RHSA-2024:8686 Vendor Advisory Changed Reference Type https://access.redhat.com/errata/RHSA-2024:8690 No Types Assigned https://access.redhat.com/errata/RHSA-2024:8690 Vendor Advisory Changed Reference Type https://access.redhat.com/errata/RHSA-2024:8694 No Types Assigned https://access.redhat.com/errata/RHSA-2024:8694 Vendor Advisory Changed Reference Type https://access.redhat.com/errata/RHSA-2024:8700 No Types Assigned https://access.redhat.com/errata/RHSA-2024:8700 Vendor Advisory Changed Reference Type https://access.redhat.com/errata/RHSA-2024:8984 No Types Assigned https://access.redhat.com/errata/RHSA-2024:8984 Vendor Advisory Changed Reference Type https://access.redhat.com/errata/RHSA-2024:9051 No Types Assigned https://access.redhat.com/errata/RHSA-2024:9051 Vendor Advisory Changed Reference Type https://access.redhat.com/errata/RHSA-2024:9454 No Types Assigned https://access.redhat.com/errata/RHSA-2024:9454 Vendor Advisory Changed Reference Type https://access.redhat.com/errata/RHSA-2024:9459 No Types Assigned https://access.redhat.com/errata/RHSA-2024:9459 Vendor Advisory Changed Reference Type https://access.redhat.com/errata/RHSA-2024:9926 No Types Assigned https://access.redhat.com/errata/RHSA-2024:9926 Vendor Advisory Changed Reference Type https://access.redhat.com/security/cve/CVE-2024-9676 No Types Assigned https://access.redhat.com/security/cve/CVE-2024-9676 Vendor Advisory Changed Reference Type https://bugzilla.redhat.com/show_bug.cgi?id=2317467 No Types Assigned https://bugzilla.redhat.com/show_bug.cgi?id=2317467 Issue Tracking Changed Reference Type https://github.com/advisories/GHSA-wq2p-5pc6-wpgf No Types Assigned https://github.com/advisories/GHSA-wq2p-5pc6-wpgf Third Party Advisory -
CVE Modified by [email protected]
Nov. 24, 2024
Action Type Old Value New Value Added Reference https://access.redhat.com/errata/RHSA-2024:9926 -
CVE Modified by [email protected]
Nov. 13, 2024
Action Type Old Value New Value Added Reference Red Hat, Inc. https://access.redhat.com/errata/RHSA-2024:8984 [No types assigned] -
CVE Modified by [email protected]
Nov. 12, 2024
Action Type Old Value New Value Added Reference Red Hat, Inc. https://access.redhat.com/errata/RHSA-2024:9454 [No types assigned] Added Reference Red Hat, Inc. https://access.redhat.com/errata/RHSA-2024:9459 [No types assigned] -
CVE Modified by [email protected]
Nov. 11, 2024
Action Type Old Value New Value Added Reference Red Hat, Inc. https://access.redhat.com/errata/RHSA-2024:8700 [No types assigned] Added Reference Red Hat, Inc. https://access.redhat.com/errata/RHSA-2024:9051 [No types assigned] -
CVE Modified by [email protected]
Nov. 07, 2024
Action Type Old Value New Value Added Reference Red Hat, Inc. https://access.redhat.com/errata/RHSA-2024:8694 [No types assigned] -
CVE Modified by [email protected]
Nov. 06, 2024
Action Type Old Value New Value Added Reference Red Hat, Inc. https://access.redhat.com/errata/RHSA-2024:8690 [No types assigned] -
CVE Modified by [email protected]
Nov. 06, 2024
Action Type Old Value New Value Added Reference Red Hat, Inc. https://access.redhat.com/errata/RHSA-2024:8686 [No types assigned] -
CVE Modified by [email protected]
Oct. 31, 2024
Action Type Old Value New Value Added Reference Red Hat, Inc. https://access.redhat.com/errata/RHSA-2024:8428 [No types assigned] -
CVE Modified by [email protected]
Oct. 30, 2024
Action Type Old Value New Value Added Reference Red Hat, Inc. https://access.redhat.com/errata/RHSA-2024:8418 [No types assigned] Added Reference Red Hat, Inc. https://access.redhat.com/errata/RHSA-2024:8437 [No types assigned] -
CVE Modified by [email protected]
Oct. 15, 2024
Action Type Old Value New Value Added Reference Red Hat, Inc. https://github.com/advisories/GHSA-wq2p-5pc6-wpgf [No types assigned] -
CVE Received by [email protected]
Oct. 15, 2024
Action Type Old Value New Value Added Description A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to hang and result in a denial of service via OOM kill when running a malicious image using an automatically assigned user namespace (`--userns=auto` in Podman and Buildah). The containers/storage library will read /etc/passwd inside the container, but does not properly validate if that file is a symlink, which can be used to cause the library to read an arbitrary file on the host. Added Reference Red Hat, Inc. https://access.redhat.com/security/cve/CVE-2024-9676 [No types assigned] Added Reference Red Hat, Inc. https://bugzilla.redhat.com/show_bug.cgi?id=2317467 [No types assigned] Added CWE Red Hat, Inc. CWE-22 Added CVSS V3.1 Red Hat, Inc. AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS is a daily estimate of the probability of exploitation activity
being observed over the next 30 days. Following chart shows the EPSS
score history of the vulnerability.