CVE-2024-1753

CVE-2024-1753 affects Buildah and Podman Build. A faulty container mount can allow a dummy image with a symlink to the host root to mount the host filesystem inside the RUN step, giving read/write access and enabling full container escape at build time. Affected components include Buildah and Pod...

CVE-2024-1753

A flaw was found in Buildah and subsequently Podman Build which allows containers to mount arbitrary locations on the host filesystem into build containers. A malicious Containerfile can use a dummy image with a symbolic link to the root filesystem as a mount source and cause the mount operation ...

CVE-2024-1753

A flaw was found in Buildah and subsequently Podman Build which allows containers to mount arbitrary locations on the host filesystem into build containers. A malicious Containerfile can use a dummy image with a symbolic link to the root filesystem as a mount source and cause the mount operation ...