CVE-2024-9675

Summary

CVE-2024-9675 is a newly discovered vulnerability affecting Buildah, an open-source tool for building OCI containers. The issue lies in the way Buildah handles cache mounts. Specifically, it fails to validate user-defined cache paths, allowing malicious actors to mount arbitrary directories from the host system into the container with read-write access. This vulnerability could potentially lead to information disclosure or privilege escalation, making it a significant security risk. Container file `RUN` instructions can be exploited to take advantage of this issue, compromising the container's security and potentially the entire hosting environment.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.