The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0267-1 advisory.

    - CVE-2024-9676: github.com/containers/storage: Fixed symlink traversal vulnerability in the     containers/storage library can cause Denial of Service (DoS) (bsc#1231698)

    - Load ip_tables and ip6_tables kernel module (bsc#1214612)
      * Required for rootless mode as a regular user has no permission         to load kernel modules

    - CVE-2024-9675: Fixed cache arbitrary directory mount in buildah (bsc#1231499)
    - CVE-2024-9407: Fixed Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount     Instruction in buildah (bsc#1231208)
    - CVE-2024-9341: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library     (bsc#1231230)
    - CVE-2024-1753: Fixed full container escape at build time in buildah (bsc#1221677)
    - CVE-2024-11218: Fixed a container breakout by using --jobs=2 and a race condition when building a     malicious Containerfile. (bsc#1236270)

    - Refactor network backend dependencies:
      * podman requires either netavark or cni-plugins. On ALP, require         netavark, otherwise prefer netavark but don't force it.
      * This fixes missing cni-plugins in some scenarios
      * Default to netavark everywhere where it's available

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLES15 Security Update : podman (SUSE-SU-2025:0267-1)

high Nessus Plugin ID 214742

Version 1.2

Version 1.1

Version 1.2 Feb 4, 2025, 8:47 AM CVSS metrics ("CVSSv3 score" set to 8.2) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N") CVSSv3 score source (changed from "CVE-2024-11218" to none) Plugin Feed: 202502040847
Version 1.1 Jan 29, 2025, 7:33 AM New Plugin Feed: 202501290733