CVE-2024-9675
Buildah: buildah allows arbitrary directory mount
CVSS Score
7.8
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the host (read/write) into the container as long as those files can be accessed by the user running Buildah.
| CWE | CWE-22 |
| Published | Oct 9, 2024 |
| Last Updated | Mar 18, 2026 |
Stay Ahead of the Next One
Get instant alerts for
Be the first to know when new high vulnerabilities are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
Red Hat / Red Hat Enterprise Linux 8
All versions affected Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
All versions affected Red Hat / Red Hat Enterprise Linux 8.6 Telecommunications Update Service
All versions affected Red Hat / Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
All versions affected Red Hat / Red Hat Enterprise Linux 8.8 Extended Update Support
All versions affected Red Hat / Red Hat Enterprise Linux 9
All versions affected Red Hat / Red Hat Enterprise Linux 9
All versions affected Red Hat / Red Hat Enterprise Linux 9
All versions affected Red Hat / Red Hat Enterprise Linux 9
All versions affected Red Hat / Red Hat Enterprise Linux 9.0 Extended Update Support
All versions affected Red Hat / Red Hat Enterprise Linux 9.0 Extended Update Support
All versions affected Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Support
All versions affected Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Support
All versions affected Red Hat / Red Hat OpenShift Container Platform 4.12
All versions affected Red Hat / Red Hat OpenShift Container Platform 4.13
All versions affected Red Hat / Red Hat OpenShift Container Platform 4.13
All versions affected Red Hat / Red Hat OpenShift Container Platform 4.14
All versions affected Red Hat / Red Hat OpenShift Container Platform 4.14
All versions affected Red Hat / Red Hat OpenShift Container Platform 4.15
All versions affected Red Hat / Red Hat OpenShift Container Platform 4.15
All versions affected Red Hat / Red Hat OpenShift Container Platform 4.16
All versions affected Red Hat / Red Hat OpenShift Container Platform 4.16
All versions affected Red Hat / Red Hat OpenShift Container Platform 4.17
All versions affected Red Hat / Red Hat OpenShift Container Platform 4.17
All versions affected Red Hat / Red Hat OpenShift Container Platform 4.18
All versions affected Red Hat / OpenShift Developer Tools and Services
All versions affected Red Hat / OpenShift Developer Tools and Services
All versions affected Red Hat / Red Hat Enterprise Linux 10
All versions affected Red Hat / Red Hat Enterprise Linux 10
All versions affected Red Hat / Red Hat Enterprise Linux 7
All versions affected Red Hat / Red Hat Enterprise Linux 9
All versions affected Red Hat / Red Hat OpenShift Container Platform 4
All versions affected Red Hat / Red Hat OpenShift Container Platform 4
All versions affected Red Hat / Red Hat OpenShift Container Platform 4
All versions affected Red Hat / Red Hat Quay 3
All versions affected References
access.redhat.com: https://access.redhat.com/errata/RHSA-2024:8563 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:8675 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:8679 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:8686 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:8690 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:8700 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:8703 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:8707 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:8708 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:8709 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:8846 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:8984 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:8994 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:9051 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:9454 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:9459 access.redhat.com: https://access.redhat.com/errata/RHSA-2025:2445 access.redhat.com: https://access.redhat.com/errata/RHSA-2025:2449 access.redhat.com: https://access.redhat.com/errata/RHSA-2025:2454 access.redhat.com: https://access.redhat.com/errata/RHSA-2025:2701 access.redhat.com: https://access.redhat.com/errata/RHSA-2025:2710 access.redhat.com: https://access.redhat.com/errata/RHSA-2025:3301 access.redhat.com: https://access.redhat.com/errata/RHSA-2025:3573 access.redhat.com: https://access.redhat.com/security/cve/CVE-2024-9675 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2317458
Credits
Red Hat would like to thank Erik Sjölund (Upstream) for reporting this issue.