A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and directories on the host.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0267-1 advisory.

    - CVE-2024-9676: github.com/containers/storage: Fixed symlink traversal vulnerability in the     containers/storage library can cause Denial of Service (DoS) (bsc#1231698)

    - Load ip_tables and ip6_tables kernel module (bsc#1214612)
      * Required for rootless mode as a regular user has no permission         to load kernel modules

    - CVE-2024-9675: Fixed cache arbitrary directory mount in buildah (bsc#1231499)
    - CVE-2024-9407: Fixed Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount     Instruction in buildah (bsc#1231208)
    - CVE-2024-9341: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library     (bsc#1231230)
    - CVE-2024-1753: Fixed full container escape at build time in buildah (bsc#1221677)
    - CVE-2024-11218: Fixed a container breakout by using --jobs=2 and a race condition when building a     malicious Containerfile. (bsc#1236270)

    - Refactor network backend dependencies:
      * podman requires either netavark or cni-plugins. On ALP, require         netavark, otherwise prefer netavark but don't force it.
      * This fixes missing cni-plugins in some scenarios
      * Default to netavark everywhere where it's available

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2025-908dfe95f6 advisory.

    Security fix for CVE-2024-11218 - fixed in buildah 1.38.1, podman 5.3.2

    Automatic update for buildah-1.38.1-1.fc41, containers-common-0.61.1-1.fc41, podman-5.3.2-1.fc41.

    ##### **Changelog for buildah**

    ```
    * Tue Jan 21 2025 Packit <hello@packit.dev> - 2:1.38.1-1
    - Update to 1.38.1 upstream release

    ```

    ##### **Changelog for containers-common**

    ```
    * Thu Jan 16 2025 Packit <hello@packit.dev> - 5:0.61.1-1
    - Update to 0.61.1 upstream release

    ```

    ##### **Changelog for podman**

    ```
    * Wed Jan 22 2025 Packit <hello@packit.dev> - 5:5.3.2-1
    - Update to 5.3.2 upstream release

    * Wed Jan 22 2025 Lokesh Mandvekar <lsm5@fedoraproject.org> - 5:5.3.1-4
    - remove patch merged in upcoming upstream release

    * Fri Jan 17 2025 Mikhail Gavrilov <mikhail.v.gavrilov@gmail.com> - 5:5.3.1-3
    - apply MR https://github.com/containers/storage/pull/2193

    * Wed Nov 27 2024 Lokesh Mandvekar <lsm5@fedoraproject.org> - 5:5.3.1-2
    - remove unused patch

    ```

    ----

    apply MR https://github.com/containers/storage/pull/2193




Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
214742	SUSE SLES15 Security Update : podman (SUSE-SU-2025:0267-1)	Nessus	SuSE Local Security Checks	high
214636	Fedora 41 : buildah / containers-common / podman (2025-908dfe95f6)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2024-11218

high

Tenable Plugins

high

high