CVE-2024-9675

HIGH
Published Oct 9, 2024 Modified Aug 25, 2025 CWE-22

Description

A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the host (read/write) into the container as long as those files can be accessed by the user running Buildah.

Is your site exposed to CVE-2024-9675?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.8
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness Type (CWE)

CWE-22 Path Traversal

Affected Products

Vendor Product
buildah_project buildah
redhat openshift_container_platform
redhat openshift_container_platform
redhat openshift_container_platform
redhat openshift_container_platform
redhat openshift_container_platform
redhat enterprise_linux
redhat enterprise_linux
redhat enterprise_linux_eus
redhat enterprise_linux_eus
redhat enterprise_linux_eus
redhat enterprise_linux_eus
redhat enterprise_linux_for_arm_64
redhat enterprise_linux_for_arm_64
redhat enterprise_linux_for_arm_64_eus
redhat enterprise_linux_for_arm_64_eus
redhat enterprise_linux_for_arm_64_eus
redhat enterprise_linux_for_arm_64_eus
redhat enterprise_linux_for_ibm_z_systems
redhat enterprise_linux_for_ibm_z_systems
redhat enterprise_linux_for_ibm_z_systems_eus
redhat enterprise_linux_for_ibm_z_systems_eus
redhat enterprise_linux_for_ibm_z_systems_eus
redhat enterprise_linux_for_ibm_z_systems_eus
redhat enterprise_linux_for_power_little_endian
redhat enterprise_linux_for_power_little_endian
redhat enterprise_linux_for_power_little_endian_eus
redhat enterprise_linux_for_power_little_endian_eus
redhat enterprise_linux_for_power_little_endian_eus
redhat enterprise_linux_for_power_little_endian_eus
redhat enterprise_linux_server_aus
redhat enterprise_linux_server_aus
redhat enterprise_linux_server_aus
redhat enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions
redhat enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions
redhat enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions
redhat enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions
redhat enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions
redhat enterprise_linux_server_tus
redhat enterprise_linux_server_tus
redhat enterprise_linux_update_services_for_sap_solutions
redhat enterprise_linux_update_services_for_sap_solutions
redhat enterprise_linux_update_services_for_sap_solutions
redhat enterprise_linux_update_services_for_sap_solutions
redhat enterprise_linux_update_services_for_sap_solutions

References

Frequently Asked Questions

What is CVE-2024-9675? +
A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the host (read/write) into the container as long as those files can be accessed by the user running Buildah. It has a CVSS v3.1 base score of 7.8 (HIGH).
How severe is CVE-2024-9675? +
CVE-2024-9675 has a CVSS v3.1 score of 7.8 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.
What products are affected by CVE-2024-9675? +
CVE-2024-9675 affects products from buildah_project, redhat, specifically: buildah, enterprise_linux, enterprise_linux_eus, enterprise_linux_for_arm_64, enterprise_linux_for_arm_64_eus, enterprise_linux_for_ibm_z_systems, enterprise_linux_for_ibm_z_systems_eus, enterprise_linux_for_power_little_endian, enterprise_linux_for_power_little_endian_eus, enterprise_linux_server_aus, enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions, enterprise_linux_server_tus, enterprise_linux_update_services_for_sap_solutions, openshift_container_platform. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2024-9675? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2024-9675 — free, no signup required.