Executive brief
Container escape at build time in github.com/containers/buildah
Affected products
- Go github.com/containers/podman/v4
- Go github.com/containers/podman/v5
- Go github.com/containers/buildah
Junglewise Threat Intelligence
CVE-2024-1753: GO-2024-2658 - Container escape at build time in github.com/containers/buildah
CVE-2024-1753 · Severity: low · CVSS 3.1 · Published 2024-03-22
Technologies: github.com/containers/podman/v4 (Go), github.com/containers/podman/v5 (Go), github.com/containers/buildah (Go). Vendors: Go.
Related threats
- Podman quadlet install incomplete file truncation
- Buildah is a tool that facilitates building OCI images. From 1.38.1 until 1.43.2 and 1.44.0, TempDirForURL in define/types.go does not secur
- Podman host environment variable leak via malformed container image
- Podman symlink traversal in WORKDIR path resolution
- Podman command injection in HyperV machine backend