logo
DATABASE RESOURCES PRICING ABOUT US

CVE-2020-10696

Description

A path traversal flaw was found in Buildah in versions before 1.14.5. This flaw allows an attacker to trick a user into building a malicious container image hosted on an HTTP(s) server and then write files to the user's system anywhere that the user has permissions.


Affected Package


OS OS Version Package Name Package Version
Debian 12 golang-github-containers-buildah 1.23.1+ds1-3
Debian 11 golang-github-containers-buildah 1.19.6+dfsg1-1
Debian 999 golang-github-containers-buildah 1.23.1+ds1-3

Related