CVE-2024-9676

Name of the Vulnerable Software and Affected Versions Podman, Buildah, and CRI-O (affected versions not specified)

Description A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to hang and result in a denial of service via OOM kill when running a malicious image using an automatically assigned user namespace (--userns=auto in Podman and Buildah). The containers/storage library will read /etc/passwd inside the container, but does not properly validate if that file is a symlink, which can be used to cause the library to read an arbitrary file on the host. This issue can be exploited by a remote attacker to cause a denial of service using a specially crafted symbolic link to an arbitrary file on the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.