CVE-2024-1753

CVSS 3.1 Score 8.6 of 10 (high)

Details

Published Mar 18, 2024
Updated: Mar 27, 2024
CWE ID 269

Summary

CVE-2024-1753 is a vulnerability found in Buildah and subsequently Podman Build. This vulnerability allows containers to mount arbitrary locations on the host filesystem into build containers, potentially leading to a full container escape at build time. A malicious Containerfile can exploit this flaw by using a dummy image with a symbolic link to the root filesystem as a mount source, causing the host root filesystem to be mounted inside the RUN step. This gives read-write access to the host filesystem from within the container. An attacker can leverage this vulnerability to gain unauthorized access, manipulate data, and potentially compromise the entire organization's system. To remediate this vulnerability, it is recommended to update Buildah and Podman Build to their latest versions that contain fixes for this issue.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-1753 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options