CVE-2024-28176

containers-common: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se...

CVE-2024-28176 is fixed in 38 products on 1 platform, first by RHSA-2024:3827, released June 11, 2024. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.5
Moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0210
81st percentile

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * podman: jose-go: improper handling of highly compressed data (CVE-2024-28180) * buildah: jose-go: improper handling of highly compressed data (CVE-2024-28180) * podman: jose-go: resource exhaustion (CVE-2024-28176) * buildah: jose-go: resource exhaustion (CVE-2024-28176) * skopeo: jose-go: resource exhaustion (CVE-2024-28176) Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8 Release Notes linked from the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
aardvark-dns · RHEL 8 2:1.10.0-1.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
aardvark-dns · almalinux 8 2:1.10.0-1.module_el8.10.0+3792+03eaed9c ALSA-2024:3968 Jun 18, 2024
aardvark-dns · ol 8 2:1.10.0-1.module+el8.10.0+90298+77a9814d ELSA-2024-3968 Jun 18, 2024
aardvark-dns · rocky 8 2:1.10.0-1.module+el8.10.0+1815+5fe7415e RLSA-2024:3968 Jul 2, 2024
buildah · RHEL 8 2:1.33.7-2.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
buildah · RHEL 9 2:1.33.7-2.el9_4 RHSA-2024:3827 Jun 11, 2024
buildah · almalinux 8 2:1.33.7-2.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
buildah · almalinux 9 2:1.33.7-2.el9_4 ALSA-2024:3827 Jun 11, 2024
buildah · ol 8 2:1.33.7-2.module+el8.10.0+90352+16362864 ELSA-2024-3968 Jun 18, 2024
buildah · ol 9 2:1.33.7-2.0.1.el9_4 ELSA-2024-3827 Jun 11, 2024
buildah · rocky 8 2:1.33.7-2.module+el8.10.0+1829+9bb2696f RLSA-2024:3968 Jul 2, 2024
buildah · rocky 9 2:1.33.7-2.el9_4 RLSA-2024:3827 Jun 14, 2024
buildah-tests · RHEL 8 2:1.33.7-2.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
buildah-tests · RHEL 9 2:1.33.7-2.el9_4 RHSA-2024:3827 Jun 11, 2024
buildah-tests · almalinux 8 2:1.33.7-2.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
buildah-tests · almalinux 9 2:1.33.7-2.el9_4 ALSA-2024:3827 Jun 11, 2024
buildah-tests · ol 8 2:1.33.7-2.module+el8.10.0+90352+16362864 ELSA-2024-3968 Jun 18, 2024
buildah-tests · ol 9 2:1.33.7-2.0.1.el9_4 ELSA-2024-3827 Jun 11, 2024
cockpit-podman · RHEL 8 0:84.1-1.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
cockpit-podman · almalinux 8 84.1-1.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
cockpit-podman · ol 8 0:84.1-1.module+el8.10.0+90298+77a9814d ELSA-2024-3968 Jun 18, 2024
cockpit-podman · rocky 8 0:84.1-1.module+el8.10.0+1815+5fe7415e RLSA-2024:3968 Jul 2, 2024
conmon · RHEL 8 3:2.1.10-1.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
conmon · almalinux 8 3:2.1.10-1.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
conmon · ol 8 3:2.1.10-1.module+el8.10.0+90298+77a9814d ELSA-2024-3968 Jun 18, 2024
conmon · rocky 8 3:2.1.10-1.module+el8.10.0+1815+5fe7415e RLSA-2024:3968 Jul 2, 2024
container-selinux · RHEL 8 2:2.229.0-2.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
container-selinux · almalinux 8 2:2.229.0-2.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
container-selinux · ol 8 2:2.229.0-2.module+el8.10.0+90298+77a9814d ELSA-2024-3968 Jun 18, 2024
container-selinux · rocky 8 2:2.229.0-2.module+el8.10.0+1815+5fe7415e RLSA-2024:3968 Jul 2, 2024
containernetworking-plugins · RHEL 8 1:1.4.0-2.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
containernetworking-plugins · almalinux 8 1:1.4.0-2.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
containernetworking-plugins · ol 8 1:1.4.0-2.module+el8.10.0+90298+77a9814d ELSA-2024-3968 Jun 18, 2024
containernetworking-plugins · rocky 8 1:1.4.0-2.module+el8.10.0+1815+5fe7415e RLSA-2024:3968 Jul 2, 2024
containers-common · RHEL 8 2:1-81.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
containers-common · almalinux 8 2:1-81.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
containers-common · ol 8 2:1-81.0.1.module+el8.10.0+90298+77a9814d ELSA-2024-3968 Jun 18, 2024
containers-common · rocky 8 2:1-81.module+el8.10.0+1815+5fe7415e RLSA-2024:3968 Jul 2, 2024
crit · RHEL 8 0:3.18-5.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
crit · almalinux 8 3.18-5.module_el8.10.0+3845+87b84552 ALSA-2024:3968 Jun 18, 2024
crit · ol 8 0:3.18-5.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3968 Jun 18, 2024
criu · RHEL 8 0:3.18-5.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
criu · almalinux 8 3.18-5.module_el8.10.0+3845+87b84552 ALSA-2024:3968 Jun 18, 2024
criu · ol 8 0:3.18-5.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3968 Jun 18, 2024
criu · rocky 8 0:3.18-5.module+el8.10.0+1815+5fe7415e RLSA-2024:3968 Jul 2, 2024
criu-devel · RHEL 8 0:3.18-5.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
criu-devel · almalinux 8 3.18-5.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
criu-devel · ol 8 0:3.18-5.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3968 Jun 18, 2024
criu-libs · RHEL 8 0:3.18-5.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
criu-libs · almalinux 8 3.18-5.module_el8.10.0+3845+87b84552 ALSA-2024:3968 Jun 18, 2024
criu-libs · ol 8 0:3.18-5.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3968 Jun 18, 2024
crun · RHEL 8 0:1.14.3-2.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
crun · almalinux 8 1.14.3-2.module_el8.10.0+3845+87b84552 ALSA-2024:3968 Jun 18, 2024
crun · ol 8 0:1.14.3-2.module+el8.10.0+90298+77a9814d ELSA-2024-3968 Jun 18, 2024
crun · rocky 8 0:1.14.3-2.module+el8.10.0+1815+5fe7415e RLSA-2024:3968 Jul 2, 2024
fuse-overlayfs · RHEL 8 0:1.13-1.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
fuse-overlayfs · almalinux 8 1.13-1.module_el8.10.0+3792+03eaed9c ALSA-2024:3968 Jun 18, 2024
fuse-overlayfs · ol 8 0:1.13-1.module+el8.10.0+90298+77a9814d ELSA-2024-3968 Jun 18, 2024
fuse-overlayfs · rocky 8 0:1.13-1.module+el8.10.0+1815+5fe7415e RLSA-2024:3968 Jul 2, 2024
jose · RHEL 8 0:10-2.el8_10.3 RHSA-2024:5294 Aug 13, 2024
jose · RHEL 9 0:14-1.el9 RHSA-2024:9181 Nov 12, 2024
jose · almalinux 8 10-2.el8_10.3 ALSA-2024:5294 Aug 13, 2024
jose · almalinux 9 14-1.el9 ALSA-2024:9181 Nov 12, 2024
jose · ol 8 0:10-2.el8_10.3 ELSA-2024-5294 Aug 13, 2024
jose · ol 9 0:14-1.el9 ELSA-2024-9181 Nov 14, 2024
jose · rocky 8 0:10-2.el8_10.3 RLSA-2024:5294 May 7, 2025
jose · rocky 9 0:14-1.el9 RLSA-2024:9181 Mar 17, 2025
libjose · RHEL 8 0:10-2.el8_10.3 RHSA-2024:5294 Aug 13, 2024
libjose · RHEL 9 0:14-1.el9 RHSA-2024:9181 Nov 12, 2024
libjose · almalinux 8 10-2.el8_10.3 ALSA-2024:5294 Aug 13, 2024
libjose · almalinux 9 14-1.el9 ALSA-2024:9181 Nov 12, 2024
libjose · ol 8 0:10-2.el8_10.3 ELSA-2024-5294 Aug 13, 2024
libjose · ol 9 0:14-1.el9 ELSA-2024-9181 Nov 14, 2024
libjose-devel · RHEL 8 0:10-2.el8_10.3 RHSA-2024:5294 Aug 13, 2024
libjose-devel · RHEL 9 0:14-1.el9 RHSA-2024:9181 Nov 12, 2024
libjose-devel · almalinux 8 10-2.el8_10.3 ALSA-2024:5294 Aug 13, 2024
libjose-devel · almalinux 9 14-1.el9 ALSA-2024:9181 Nov 12, 2024
libjose-devel · ol 8 0:10-2.el8_10.3 ELSA-2024-5294 Aug 13, 2024
libjose-devel · ol 9 0:14-1.el9 ELSA-2024-9181 Nov 14, 2024
libslirp · RHEL 8 0:4.4.0-2.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
libslirp · almalinux 8 4.4.0-2.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
libslirp · ol 8 0:4.4.0-2.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3968 Jun 18, 2024
libslirp · rocky 8 0:4.4.0-2.module+el8.10.0+1815+5fe7415e RLSA-2024:3968 Jul 2, 2024
libslirp-devel · RHEL 8 0:4.4.0-2.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
libslirp-devel · almalinux 8 4.4.0-2.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
libslirp-devel · ol 8 0:4.4.0-2.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3968 Jun 18, 2024
netavark · RHEL 8 2:1.10.3-1.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
netavark · almalinux 8 2:1.10.3-1.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
netavark · ol 8 2:1.10.3-1.module+el8.10.0+90298+77a9814d ELSA-2024-3968 Jun 18, 2024
netavark · rocky 8 2:1.10.3-1.module+el8.10.0+1815+5fe7415e RLSA-2024:3968 Jul 2, 2024
oci-seccomp-bpf-hook · RHEL 8 0:1.2.10-1.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
oci-seccomp-bpf-hook · almalinux 8 1.2.10-1.module_el8.10.0+3792+03eaed9c ALSA-2024:3968 Jun 18, 2024
oci-seccomp-bpf-hook · ol 8 0:1.2.10-1.module+el8.10.0+90298+77a9814d ELSA-2024-3968 Jun 18, 2024
oci-seccomp-bpf-hook · rocky 8 0:1.2.10-1.module+el8.10.0+1815+5fe7415e RLSA-2024:3968 Jul 2, 2024
podman · RHEL 8 4:4.9.4-3.module+el8.10.0+21974+acd2159c RHSA-2024:3968 Jun 18, 2024
podman · RHEL 9 4:4.9.4-4.el9_4 RHSA-2024:3826 Jun 11, 2024
podman · almalinux 8 4:4.9.4-3.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
podman · almalinux 9 4:4.9.4-4.el9_4 ALSA-2024:3826 Jun 11, 2024
podman · ol 8 4:4.9.4-3.0.1.module+el8.10.0+90352+16362864 ELSA-2024-3968 Jun 18, 2024
podman · ol 9 4:4.9.4-4.0.1.el9_4 ELSA-2024-3826 Jun 11, 2024
podman · rocky 8 4:4.9.4-3.module+el8.10.0+1829+9bb2696f RLSA-2024:3968 Jul 2, 2024
podman · rocky 9 4:4.9.4-4.el9_4 RLSA-2024:3826 Jun 14, 2024
podman-catatonit · RHEL 8 4:4.9.4-3.module+el8.10.0+21974+acd2159c RHSA-2024:3968 Jun 18, 2024
podman-catatonit · almalinux 8 4:4.9.4-3.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
podman-catatonit · ol 8 4:4.9.4-3.0.1.module+el8.10.0+90352+16362864 ELSA-2024-3968 Jun 18, 2024
podman-docker · RHEL 8 4:4.9.4-3.module+el8.10.0+21974+acd2159c RHSA-2024:3968 Jun 18, 2024
podman-docker · RHEL 9 4:4.9.4-4.el9_4 RHSA-2024:3826 Jun 11, 2024
podman-docker · almalinux 8 4:4.9.4-3.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
podman-docker · almalinux 9 4:4.9.4-4.el9_4 ALSA-2024:3826 Jun 11, 2024
podman-docker · ol 8 4:4.9.4-3.0.1.module+el8.10.0+90352+16362864 ELSA-2024-3968 Jun 18, 2024
podman-docker · ol 9 4:4.9.4-4.0.1.el9_4 ELSA-2024-3826 Jun 11, 2024
podman-gvproxy · RHEL 8 4:4.9.4-3.module+el8.10.0+21974+acd2159c RHSA-2024:3968 Jun 18, 2024
podman-gvproxy · almalinux 8 4:4.9.4-3.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
podman-gvproxy · ol 8 4:4.9.4-3.0.1.module+el8.10.0+90352+16362864 ELSA-2024-3968 Jun 18, 2024
podman-plugins · RHEL 8 4:4.9.4-3.module+el8.10.0+21974+acd2159c RHSA-2024:3968 Jun 18, 2024
podman-plugins · RHEL 9 4:4.9.4-4.el9_4 RHSA-2024:3826 Jun 11, 2024
podman-plugins · almalinux 8 4:4.9.4-3.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
podman-plugins · almalinux 9 4:4.9.4-4.el9_4 ALSA-2024:3826 Jun 11, 2024
podman-plugins · ol 8 4:4.9.4-3.0.1.module+el8.10.0+90352+16362864 ELSA-2024-3968 Jun 18, 2024
podman-plugins · ol 9 4:4.9.4-4.0.1.el9_4 ELSA-2024-3826 Jun 11, 2024
podman-remote · RHEL 8 4:4.9.4-3.module+el8.10.0+21974+acd2159c RHSA-2024:3968 Jun 18, 2024
podman-remote · RHEL 9 4:4.9.4-4.el9_4 RHSA-2024:3826 Jun 11, 2024
podman-remote · almalinux 8 4:4.9.4-3.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
podman-remote · almalinux 9 4:4.9.4-4.el9_4 ALSA-2024:3826 Jun 11, 2024
podman-remote · ol 8 4:4.9.4-3.0.1.module+el8.10.0+90352+16362864 ELSA-2024-3968 Jun 18, 2024
podman-remote · ol 9 4:4.9.4-4.0.1.el9_4 ELSA-2024-3826 Jun 11, 2024
podman-tests · RHEL 8 4:4.9.4-3.module+el8.10.0+21974+acd2159c RHSA-2024:3968 Jun 18, 2024
podman-tests · RHEL 9 4:4.9.4-4.el9_4 RHSA-2024:3826 Jun 11, 2024
podman-tests · almalinux 8 4:4.9.4-3.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
podman-tests · almalinux 9 4:4.9.4-4.el9_4 ALSA-2024:3826 Jun 11, 2024
podman-tests · ol 8 4:4.9.4-3.0.1.module+el8.10.0+90352+16362864 ELSA-2024-3968 Jun 18, 2024
podman-tests · ol 9 4:4.9.4-4.0.1.el9_4 ELSA-2024-3826 Jun 11, 2024
python-podman · rocky 8 0:4.9.0-1.module+el8.10.0+1815+5fe7415e RLSA-2024:3968 Jul 2, 2024
python3-criu · RHEL 8 0:3.18-5.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
python3-criu · almalinux 8 3.18-5.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
python3-criu · ol 8 0:3.18-5.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3968 Jun 18, 2024
python3-podman · RHEL 8 0:4.9.0-1.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
python3-podman · almalinux 8 4.9.0-1.module_el8.10.0+3792+03eaed9c ALSA-2024:3968 Jun 18, 2024
python3-podman · ol 8 0:4.9.0-1.module+el8.10.0+90298+77a9814d ELSA-2024-3968 Jun 18, 2024
runc · RHEL 8 1:1.1.12-1.module+el8.10.0+21974+acd2159c RHSA-2024:3968 Jun 18, 2024
runc · almalinux 8 1:1.1.12-1.module_el8.10.0+3845+87b84552 ALSA-2024:3968 Jun 18, 2024
runc · ol 8 1:1.1.12-1.module+el8.10.0+90298+77a9814d ELSA-2024-3968 Jun 18, 2024
runc · rocky 8 1:1.1.12-1.module+el8.10.0+1815+5fe7415e RLSA-2024:3968 Jul 2, 2024
skopeo · RHEL 8 2:1.14.3-2.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
skopeo · almalinux 8 2:1.14.3-2.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
skopeo · ol 8 2:1.14.3-2.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3968 Jun 18, 2024
skopeo · rocky 8 2:1.14.3-2.module+el8.10.0+1815+5fe7415e RLSA-2024:3968 Jul 2, 2024
skopeo-tests · RHEL 8 2:1.14.3-2.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
skopeo-tests · almalinux 8 2:1.14.3-2.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
skopeo-tests · ol 8 2:1.14.3-2.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3968 Jun 18, 2024
slirp4netns · RHEL 8 0:1.2.3-1.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
slirp4netns · almalinux 8 1.2.3-1.module_el8.10.0+3845+87b84552 ALSA-2024:3968 Jun 18, 2024
slirp4netns · ol 8 0:1.2.3-1.module+el8.10.0+90298+77a9814d ELSA-2024-3968 Jun 18, 2024
slirp4netns · rocky 8 0:1.2.3-1.module+el8.10.0+1815+5fe7415e RLSA-2024:3968 Jul 2, 2024
toolbox · RHEL 8 0:0.0.99.5-2.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
toolbox · almalinux 8 0.0.99.5-2.module_el8.10.0+3845+87b84552 ALSA-2024:3968 Jun 18, 2024
toolbox · rocky 8 0:0.0.99.5-2.module+el8.10.0+1815+5fe7415e.rocky.0.2.rocky.0.2 RLSA-2024:3968 Jul 2, 2024
toolbox-tests · RHEL 8 0:0.0.99.5-2.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
toolbox-tests · almalinux 8 0.0.99.5-2.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
udica · RHEL 8 0:0.2.6-21.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
udica · almalinux 8 0.2.6-21.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
udica · ol 8 0:0.2.6-21.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3968 Jun 18, 2024
udica · rocky 8 0:0.2.6-21.module+el8.10.0+1815+5fe7415e RLSA-2024:3968 Jul 2, 2024

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.