CVE-2024-9676
Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)
CVSS Score
6.5
EPSS Score
1.3%
EPSS Percentile
80th
A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to hang and result in a denial of service via OOM kill when running a malicious image using an automatically assigned user namespace (`--userns=auto` in Podman and Buildah). The containers/storage library will read /etc/passwd inside the container, but does not properly validate if that file is a symlink, which can be used to cause the library to read an arbitrary file on the host.
| CWE | CWE-22 |
| Published | Oct 15, 2024 |
| Last Updated | Mar 26, 2026 |
Stay Ahead of the Next One
Get instant alerts for
Be the first to know when new medium vulnerabilities are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected Versions
Red Hat / Red Hat Enterprise Linux 8
All versions affected Red Hat / Red Hat Enterprise Linux 9
All versions affected Red Hat / Red Hat Enterprise Linux 9
All versions affected Red Hat / Red Hat Enterprise Linux 9
All versions affected Red Hat / Red Hat Enterprise Linux 9.4 Extended Update Support
All versions affected Red Hat / Red Hat OpenShift Container Platform 4.12
All versions affected Red Hat / Red Hat OpenShift Container Platform 4.13
All versions affected Red Hat / Red Hat OpenShift Container Platform 4.14
All versions affected Red Hat / Red Hat OpenShift Container Platform 4.14
All versions affected Red Hat / Red Hat OpenShift Container Platform 4.15
All versions affected Red Hat / Red Hat OpenShift Container Platform 4.15
All versions affected Red Hat / Red Hat OpenShift Container Platform 4.16
All versions affected Red Hat / Red Hat OpenShift Container Platform 4.16
All versions affected Red Hat / Red Hat OpenShift Container Platform 4.16
All versions affected Red Hat / Red Hat OpenShift Container Platform 4.17
All versions affected Red Hat / Red Hat OpenShift Container Platform 4.17
All versions affected Red Hat / Red Hat OpenShift Container Platform 4.17
All versions affected Red Hat / OpenShift Developer Tools and Services
All versions affected Red Hat / OpenShift Developer Tools and Services
All versions affected Red Hat / OpenShift Developer Tools and Services
All versions affected Red Hat / Red Hat Enterprise Linux 10
All versions affected Red Hat / Red Hat Enterprise Linux 10
All versions affected Red Hat / Red Hat Enterprise Linux 10
All versions affected Red Hat / Red Hat Enterprise Linux 9
All versions affected Red Hat / Red Hat Enterprise Linux 9
All versions affected Red Hat / Red Hat OpenShift Container Platform 4
All versions affected Red Hat / Red Hat OpenShift Container Platform 4
All versions affected Red Hat / Red Hat OpenShift Container Platform 4
All versions affected Red Hat / Red Hat Quay 3
All versions affected References
access.redhat.com: https://access.redhat.com/errata/RHSA-2024:10289 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:8418 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:8428 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:8437 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:8686 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:8690 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:8694 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:8700 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:8984 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:9051 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:9454 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:9459 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:9926 access.redhat.com: https://access.redhat.com/errata/RHSA-2025:0876 access.redhat.com: https://access.redhat.com/errata/RHSA-2025:2454 access.redhat.com: https://access.redhat.com/errata/RHSA-2025:2710 access.redhat.com: https://access.redhat.com/errata/RHSA-2025:3301 access.redhat.com: https://access.redhat.com/security/cve/CVE-2024-9676 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2317467 github.com: https://github.com/advisories/GHSA-wq2p-5pc6-wpgf github.com: https://github.com/containers/storage/commit/935c58f4b3e364a9c9d33ed06476a831e6ad5679
Credits
Red Hat would like to thank Erik Sjölund (Upstream) for reporting this issue.