2 matches found
buildah: Buildah: Container escape via improper bind mount validation
A flaw was found in Buildah and subsequently Podman Build which allows containers to mount arbitrary locations on the host filesystem into build containers. A malicious Containerfile can use a dummy image with a symbolic link to the root filesystem as a mount source and cause the mount operation ...
8.6CVSS6.7AI score0.0049EPSS
SaveExploits0References7
SUSE CVE-2024-1753
A flaw was found in Buildah and subsequently Podman Build which allows containers to mount arbitrary locations on the host filesystem into build containers. A malicious Containerfile can use a dummy image with a symbolic link to the root filesystem as a mount source and cause the mount operation ...
8.6CVSS7.1AI score0.0049EPSS
SaveExploits0References17
20