Link Following

🗓️ 06 Oct 2024 19:31:17Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 4 Views

Link Following vulnerability in containers allows exploitation of symbolic links in FIPS mode.

Reporter	Title	Published	Views	Family All 255
IBM Security Bulletins	Security Bulletin: Additional security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for April 2025.	3 May 202505:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to gcc, github.com/opencontainers/runc and github.com/containers/common (CVE-2024-45310, CVE-2020-11023, CVE-2024-9341)	25 Mar 202512:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in Go affects IBM Robotic Process Automation for Cloud Pak	9 Jun 202519:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	5 Jun 202506:12	–	ibm
Tenable Nessus	Alibaba Cloud Linux 3 : 0241: container-tools:rhel8 (ALINUX3-SA-2024:0241)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 9 : podman (ALSA-2024:8039)	15 Oct 202400:00	–	nessus
Tenable Nessus	AlmaLinux 9 : buildah (ALSA-2024:8112)	16 Oct 202400:00	–	nessus
Tenable Nessus	AlmaLinux 8 : container-tools:rhel8 (ALSA-2024:8846)	6 Nov 202400:00	–	nessus
Tenable Nessus	Fedora 40 : buildah / podman (2024-054752ae69)	12 Nov 202400:00	–	nessus
Tenable Nessus	Fedora 41 : buildah / podman (2024-2e8c63e8bf)	14 Nov 202400:00	–	nessus

Vulners

Node

podman_project podmanMatch4.7.1-r1go

AND

podman_project podmanMatch4.3.1-r0go

AND

podman_project podmanMatch3.2.1-r0go

AND

podman_project podmanMatch4.6.1-r0go

AND

podman_project podmanMatch1.9.0-r0go

AND

podman_project podmanMatch4.5.1-r3go

AND

podman_project podmanMatch1.9.2-r0go

AND

podman_project podmanMatch3.2.3-r0go

AND

podman_project podmanMatch3.2.0-r0go

AND

podman_project podmanMatch3.2.2-r0go

AND

podman_project podmanMatch4.4.4-r2go

AND

podman_project podmanMatch4.1.1-r0go

AND

podman_project podmanMatch5.2.2-r0go

AND

podman_project podmanMatch4.3.0-r1go

AND

podman_project podmanMatch4.9.3-r0go

AND

podman_project podmanMatch4.9.3-r1go

AND

podman_project podmanMatch4.5.0-r2go

AND

podman_project podmanMatch3.3.0-r0go

AND

podman_project podmanMatch3.1.2-r0go

AND

podman_project podmanMatch4.9.0-r0go

AND

podman_project podmanMatch4.6.2-r0go

AND

podman_project podmanMatch3.4.2-r0go

AND

podman_project podmanMatch1.8.1-r0go

AND

podman_project podmanMatch4.0.3-r0go

AND

podman_project podmanMatch4.1.0-r0go

AND

podman_project podmanMatch5.0.3-r1go

AND

podman_project podmanMatch4.4.1-r1go

AND

podman_project podmanMatch4.5.1-r0go

AND

podman_project podmanMatch4.9.3-r2go

AND

podman_project podmanMatch4.2.0-r0go

AND

podman_project podmanMatch3.4.4-r1go

AND

podman_project podmanMatch3.4.4-r0go

AND

podman_project podmanMatch4.5.1-r1go

AND

podman_project podmanMatch4.4.1-r0go

AND

podman_project podmanMatch3.3.1-r0go

AND

podman_project podmanMatch1.8.0-r2go

AND

podman_project podmanMatch4.4.2-r0go

AND

podman_project podmanMatch4.1.1-r3go

AND

podman_project podmanMatch4.1.1-r1go

AND

podman_project podmanMatch4.8.1-r0go

AND

podman_project podmanMatch4.2.1-r1go

AND

podman_project podmanMatch4.4.4-r0go

AND

podman_project podmanMatch3.4.1-r0go

AND

podman_project podmanMatch4.3.1-r2go

AND

podman_project podmanMatch1.9.3-r0go

AND

podman_project podmanMatch3.0.1-r0go

AND

podman_project podmanMatch4.3.1-r1go

AND

podman_project podmanMatch4.0.2-r0go

AND

podman_project podmanMatch4.5.1-r2go

AND

podman_project podmanMatch4.6.0-r0go

AND

podman_project podmanMatch4.3.0-r0go

AND

podman_project podmanMatch4.7.2-r0go

AND

podman_project podmanMatch3.4.0-r0go

AND

podman_project podmanMatch4.5.0-r1go

AND

podman_project podmanMatch4.6.0-r1go

AND

podman_project podmanMatch4.0.2-r1go

AND

podman_project podmanMatch5.2.1-r0go

AND

podman_project podmanMatch3.1.0-r0go

AND

podman_project podmanMatch4.5.0-r0go

AND

podman_project podmanMatch4.0.0-r0go

AND

podman_project podmanMatch4.0.1-r0go

AND

podman_project podmanMatch1.8.2-r0go

AND

podman_project podmanMatch4.7.0-r0go

AND

podman_project podmanMatch4.9.4-r0go

AND

podman_project podmanMatch4.2.1-r0go

AND

podman_project podmanMatch4.1.1-r2go

AND

podman_project podmanMatch4.1.0-r1go

AND

podman_project podmanMatch1.9.1-r1go

AND

podman_project podmanMatch5.0.3-r0go

AND

podman_project podmanMatch4.4.0-r2go

AND

podman_project podmanMatch3.1.2-r1go

AND

podman_project podmanMatch4.2.1-r2go

AND

podman_project podmanMatch3.1.1-r0go

AND

podman_project podmanMatch3.3.1-r1go

AND

podman_project podmanMatch4.8.0-r0go

AND

podman_project podmanMatch4.7.1-r0go

AND

podman_project podmanMatch4.9.4-r1go

AND

podman_project podmanMatch4.6.2-r1go

AND

podman_project podmanMatch5.0.3-r2go

AND

podman_project podmanMatch4.3.0-r2go

AND

alpinelinux alpine_linuxMatchedge

podman_project podmanMatch5.0.3-r2go

AND

podman_project podmanMatch4.9.4-r0go

AND

podman_project podmanMatch5.0.3-r0go

AND

podman_project podmanMatch5.0.3-r1go

AND

alpinelinux alpine_linuxMatch3.20

buildah_project buildahMatch1.35.4-r1go

AND

buildah_project buildahMatch1.35.4-r2go

AND

buildah_project buildahMatch1.35.4-r0go

AND

buildah_project buildahMatch1.34.1-r3go

AND

alpinelinux alpine_linuxMatch3.20

buildah_project buildahMatch1.27.0-r1go

AND

buildah_project buildahMatch1.19.6-r0go

AND

buildah_project buildahMatch1.29.0-r0go

AND

buildah_project buildahMatch1.22.3-r0go

AND

buildah_project buildahMatch1.27.2-r0go

AND

buildah_project buildahMatch1.22.0-r0go

AND

buildah_project buildahMatch1.23.1-r0go

AND

buildah_project buildahMatch1.30.0-r1go

AND

buildah_project buildahMatch1.35.4-r0go

AND

buildah_project buildahMatch1.26.2-r0go

AND

buildah_project buildahMatch1.24.2-r0go

AND

buildah_project buildahMatch1.34.1-r1go

AND

buildah_project buildahMatch1.19.8-r0go

AND

buildah_project buildahMatch1.14.2-r0go

AND

buildah_project buildahMatch1.32.0-r1go

AND

buildah_project buildahMatch1.30.0-r0go

AND

buildah_project buildahMatch1.24.2-r1go

AND

buildah_project buildahMatch1.24.1-r0go

AND

buildah_project buildahMatch1.28.2-r0go

AND

buildah_project buildahMatch1.31.0-r1go

AND

buildah_project buildahMatch1.26.1-r0go

AND

buildah_project buildahMatch1.29.0-r1go

AND

buildah_project buildahMatch1.37.3-r0go

AND

buildah_project buildahMatch1.27.0-r0go

AND

buildah_project buildahMatch1.27.1-r0go

AND

buildah_project buildahMatch1.20.1-r0go

AND

buildah_project buildahMatch1.25.1-r1go

AND

buildah_project buildahMatch1.21.0-r0go

AND

buildah_project buildahMatch1.31.0-r0go

AND

buildah_project buildahMatch1.35.4-r2go

AND

buildah_project buildahMatch1.31.1-r0go

AND

buildah_project buildahMatch1.25.1-r0go

AND

buildah_project buildahMatch1.34.0-r1go

AND

buildah_project buildahMatch1.14.8-r1go

AND

buildah_project buildahMatch1.14.3-r0go

AND

buildah_project buildahMatch1.28.0-r0go

AND

buildah_project buildahMatch1.32.0-r0go

AND

buildah_project buildahMatch1.32.1-r0go

AND

buildah_project buildahMatch1.37.2-r0go

AND

buildah_project buildahMatch1.14.6-r0go

AND

buildah_project buildahMatch1.14.4-r0go

AND

buildah_project buildahMatch1.31.3-r1go

AND

buildah_project buildahMatch1.31.3-r0go

AND

buildah_project buildahMatch1.33.2-r0go

AND

buildah_project buildahMatch1.28.0-r1go

AND

buildah_project buildahMatch1.37.0-r0go

AND

buildah_project buildahMatch1.32.2-r0go

AND

buildah_project buildahMatch1.23.0-r0go

AND

buildah_project buildahMatch1.14.9-r0go

AND

buildah_project buildahMatch1.29.1-r0go

AND

buildah_project buildahMatch1.35.4-r1go

AND

buildah_project buildahMatch1.21.1-r0go

AND

buildah_project buildahMatch1.26.1-r1go

AND

buildah_project buildahMatch1.31.2-r0go

AND

buildah_project buildahMatch1.28.2-r1go

AND

buildah_project buildahMatch1.21.3-r0go

AND

buildah_project buildahMatch1.21.0-r1go

AND

buildah_project buildahMatch1.26.4-r0go

AND

buildah_project buildahMatch1.14.8-r0go

AND

buildah_project buildahMatch1.21.4-r0go

AND

buildah_project buildahMatch1.23.1-r1go

AND

buildah_project buildahMatch1.26.2-r1go

AND

buildah_project buildahMatch1.24.0-r0go

AND

buildah_project buildahMatch1.29.1-r2go

AND

buildah_project buildahMatch1.27.2-r1go

AND

buildah_project buildahMatch1.22.3-r1go

AND

buildah_project buildahMatch1.30.0-r2go

AND

buildah_project buildahMatch1.34.1-r2go

AND

buildah_project buildahMatch1.20.0-r0go

AND

buildah_project buildahMatch1.31.1-r1go

AND

buildah_project buildahMatch1.14.1-r0go

AND

buildah_project buildahMatch1.21.2-r0go

AND

buildah_project buildahMatch1.14.5-r0go

AND

buildah_project buildahMatch1.34.1-r3go

AND

alpinelinux alpine_linuxMatchedge

golang-github-containers-common golang-github-containers-commonMatch0.42.1+ds1-2debian

AND

debian debian_linuxMatch999

containers_project github.com/containers/commonRangev0.28.1–0.28.1go

Source	Link
access	www.access.redhat.com/security/cve/CVE-2024-9341
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/containers/common/commit/e7db06585c32e1a782c1d9aa3b71ccd708f5e23f
github	www.github.com/containers/common/blob/384f77532f67afc8a73d8e0c4adb0d195df57714/pkg/subscriptions/subscriptions.go
github	www.github.com/containers/common/blob/384f77532f67afc8a73d8e0c4adb0d195df57714/pkg/subscriptions/subscriptions.go
github	www.github.com/advisories/GHSA-mc76-5925-c5p6
access	www.access.redhat.com/errata/RHSA-2024:10147
access	www.access.redhat.com/errata/RHSA-2024:10818
access	www.access.redhat.com/errata/RHSA-2024:7925
access	www.access.redhat.com/errata/RHSA-2024:8039

11 Dec 2024 06:26Current

8.1High risk

Vulners AI Score8.1

CVSS 3.15.4 - 8.2

EPSS0.00899

SSVC