CVE Feed

    Dashboard / CVE / CVE-2024-9675

    CVE-2024-9675

    A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the host (read/write) into the container as long as those files can be accessed by the user running Buildah.

    Published:Oct 9, 2024
    Last Modified:Aug 7, 2026
    EPS:Oct 9, 2024
    EPSS Score:0.00392
    CVSS Score:7.8

    Affected Products

    Vendor
    Buildah Project
    Product
    Buildah
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Enterprise Linux Eus
    Vendor
    Redhat
    Product
    Enterprise Linux For Arm 64
    Vendor
    Redhat
    Product
    Enterprise Linux For Arm 64 Eus
    Vendor
    Redhat
    Product
    Enterprise Linux For Ibm Z Systems
    Vendor
    Redhat
    Product
    Enterprise Linux For Ibm Z Systems Eus
    Vendor
    Redhat
    Product
    Enterprise Linux For Power Little Endian
    Vendor
    Redhat
    Product
    Enterprise Linux For Power Little Endian Eus
    Vendor
    Redhat
    Product
    Enterprise Linux Server Aus
    Vendor
    Redhat
    Product
    Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions
    Vendor
    Redhat
    Product
    Enterprise Linux Server Tus
    Vendor
    Redhat
    Product
    Enterprise Linux Update Services For Sap Solutions
    Vendor
    Redhat
    Product
    Ocp Tools
    Vendor
    Redhat
    Product
    Openshift
    Vendor
    Redhat
    Product
    Openshift Container Platform
    Vendor
    Redhat
    Product
    Quay
    Vendor
    Redhat
    Product
    Rhel Aus
    Vendor
    Redhat
    Product
    Rhel E4s
    Vendor
    Redhat
    Product
    Rhel Eus
    Vendor
    Redhat
    Product
    Rhel Tus

    Exploits

    No exploit reference

    References

    https://access.redhat.com/errata/RHBA-2024:10967
    https://access.redhat.com/errata/RHSA-2024:8563
    https://access.redhat.com/errata/RHSA-2024:8675
    https://access.redhat.com/errata/RHSA-2024:8679
    https://access.redhat.com/errata/RHSA-2024:8686
    https://access.redhat.com/errata/RHSA-2024:8690
    https://access.redhat.com/errata/RHSA-2024:8700
    https://access.redhat.com/errata/RHSA-2024:8703
    https://access.redhat.com/errata/RHSA-2024:8707
    https://access.redhat.com/errata/RHSA-2024:8708
    https://access.redhat.com/errata/RHSA-2024:8709
    https://access.redhat.com/errata/RHSA-2024:8846
    https://access.redhat.com/errata/RHSA-2024:8984
    https://access.redhat.com/errata/RHSA-2024:8994
    https://access.redhat.com/errata/RHSA-2024:9051
    https://access.redhat.com/errata/RHSA-2024:9454
    https://access.redhat.com/errata/RHSA-2024:9459
    https://access.redhat.com/errata/RHSA-2025:2445
    https://access.redhat.com/errata/RHSA-2025:2449
    https://access.redhat.com/errata/RHSA-2025:2454
    https://access.redhat.com/errata/RHSA-2025:2701
    https://access.redhat.com/errata/RHSA-2025:2710
    https://access.redhat.com/errata/RHSA-2025:3301
    https://access.redhat.com/errata/RHSA-2025:3573
    https://access.redhat.com/security/cve/CVE-2024-9675
    https://bugzilla.redhat.com/show_bug.cgi?id=2317458

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High