CVE-2024-9675

aardvark-dns: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se...

CVE-2024-9675 is fixed in 37 products on 1 platform, first by DEBIAN-CVE-2024-9675, released October 9, 2024. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.8
Important
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0039
33rd percentile

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library (CVE-2024-9341) * Buildah: Podman: Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction (CVE-2024-9407) * buildah: Buildah allows arbitrary directory mount (CVE-2024-9675) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
aardvark-dns · RHEL 8 2:1.10.1-2.module+el8.10.0+22397+e3c95ba6 RHSA-2024:8846 Nov 5, 2024
aardvark-dns · almalinux 8 2:1.10.1-2.module_el8.10.0+3909+6e1c1eb7 ALSA-2024:8846 Nov 5, 2024
aardvark-dns · ol 8 2:1.10.1-2.module+el8.10.0+90429+ee702c5c ELSA-2024-8846 Nov 5, 2024
aardvark-dns · rocky 8 2:1.10.1-2.module+el8.10.0+1874+ce489889 RLSA-2024:8846 Nov 8, 2024
buildah · RHEL 8 2:1.33.10-1.module+el8.10.0+22397+e3c95ba6 RHSA-2024:8846 Nov 5, 2024
buildah · RHEL 9 2:1.37.5-1.el9_5 RHSA-2024:9459 Nov 12, 2024
buildah · almalinux 8 2:1.33.10-1.module_el8.10.0+3909+6e1c1eb7 ALSA-2024:8846 Nov 5, 2024
buildah · almalinux 9 2:1.37.5-1.el9_5 ALSA-2024:9459 Nov 12, 2024
buildah · ol 8 2:1.33.8-4.module+el8.10.0+90429+ee702c5c ELSA-2024-8846 Nov 5, 2024
buildah · ol 9 2:1.33.10-1.0.1.el9_4 ELSA-2024-8563 Oct 29, 2024
buildah · opensuse-leap 15.6 1.35.4-150500.3.16.1 SUSE-SU-2024:3728-1 Oct 18, 2024
buildah · rocky 8 2:1.33.10-1.module+el8.10.0+1880+8e896d1b RLSA-2024:8846 Nov 8, 2024
buildah · rocky 9 2:1.33.10-1.el9_4 RLSA-2024:8563 Nov 8, 2024
buildah · sles 15.6 1.35.4-150500.3.16.1 SUSE-SU-2024:3728-1 Oct 18, 2024
buildah-tests · RHEL 8 2:1.33.10-1.module+el8.10.0+22397+e3c95ba6 RHSA-2024:8846 Nov 5, 2024
buildah-tests · RHEL 9 2:1.37.5-1.el9_5 RHSA-2024:9459 Nov 12, 2024
buildah-tests · almalinux 8 2:1.33.10-1.module_el8.10.0+3909+6e1c1eb7 ALSA-2024:8846 Nov 5, 2024
buildah-tests · almalinux 9 2:1.37.5-1.el9_5 ALSA-2024:9459 Nov 12, 2024
buildah-tests · ol 8 2:1.33.8-4.module+el8.10.0+90429+ee702c5c ELSA-2024-8846 Nov 5, 2024
buildah-tests · ol 9 2:1.33.10-1.0.1.el9_4 ELSA-2024-8563 Oct 29, 2024
cockpit-podman · RHEL 8 0:84.1-1.module+el8.10.0+22397+e3c95ba6 RHSA-2024:8846 Nov 5, 2024
cockpit-podman · almalinux 8 84.1-1.module_el8.10.0+3876+e55593a8 ALSA-2024:8846 Nov 5, 2024
cockpit-podman · ol 8 0:84.1-1.module+el8.10.0+90429+ee702c5c ELSA-2024-8846 Nov 5, 2024
cockpit-podman · rocky 8 0:84.1-1.module+el8.10.0+1815+5fe7415e RLSA-2024:8846 Nov 8, 2024
conmon · RHEL 8 3:2.1.10-1.module+el8.10.0+22397+e3c95ba6 RHSA-2024:8846 Nov 5, 2024
conmon · almalinux 8 3:2.1.10-1.module_el8.10.0+3876+e55593a8 ALSA-2024:8846 Nov 5, 2024
conmon · ol 8 3:2.1.10-1.module+el8.10.0+90429+ee702c5c ELSA-2024-8846 Nov 5, 2024
conmon · rocky 8 3:2.1.10-1.module+el8.10.0+1815+5fe7415e RLSA-2024:8846 Nov 8, 2024
container-selinux · RHEL 8 2:2.229.0-2.module+el8.10.0+22397+e3c95ba6 RHSA-2024:8846 Nov 5, 2024
container-selinux · almalinux 8 2:2.229.0-2.module_el8.10.0+3909+6e1c1eb7 ALSA-2024:8846 Nov 5, 2024
container-selinux · ol 8 2:2.229.0-2.module+el8.10.0+90429+ee702c5c ELSA-2024-8846 Nov 5, 2024
container-selinux · rocky 8 2:2.229.0-2.module+el8.10.0+1815+5fe7415e RLSA-2024:8846 Nov 8, 2024
containernetworking-plugins · RHEL 8 1:1.4.0-5.module+el8.10.0+22397+e3c95ba6 RHSA-2024:8846 Nov 5, 2024
containernetworking-plugins · almalinux 8 1:1.4.0-5.module_el8.10.0+3876+e55593a8 ALSA-2024:8846 Nov 5, 2024
containernetworking-plugins · ol 8 1:1.4.0-5.module+el8.10.0+90429+ee702c5c ELSA-2024-8846 Nov 5, 2024
containernetworking-plugins · rocky 8 1:1.4.0-5.module+el8.10.0+1843+6892ab28 RLSA-2024:8846 Nov 8, 2024
containers-common · RHEL 8 2:1-82.module+el8.10.0+22397+e3c95ba6 RHSA-2024:8846 Nov 5, 2024
containers-common · almalinux 8 2:1-82.module_el8.10.0+3876+e55593a8 ALSA-2024:8846 Nov 5, 2024
containers-common · ol 8 2:1-82.0.1.module+el8.10.0+90429+ee702c5c ELSA-2024-8846 Nov 5, 2024
containers-common · rocky 8 2:1-82.module+el8.10.0+1843+6892ab28 RLSA-2024:8846 Nov 8, 2024
crit · RHEL 8 0:3.18-5.module+el8.10.0+22397+e3c95ba6 RHSA-2024:8846 Nov 5, 2024
crit · almalinux 8 3.18-5.module_el8.10.0+3901+4b80ecd7 ALSA-2024:8846 Nov 5, 2024
crit · ol 8 0:3.18-5.module+el8.10.0+90429+ee702c5c ELSA-2024-8846 Nov 5, 2024
criu · RHEL 8 0:3.18-5.module+el8.10.0+22397+e3c95ba6 RHSA-2024:8846 Nov 5, 2024
criu · almalinux 8 3.18-5.module_el8.10.0+3876+e55593a8 ALSA-2024:8846 Nov 5, 2024
criu · ol 8 0:3.18-5.module+el8.10.0+90429+ee702c5c ELSA-2024-8846 Nov 5, 2024
criu · rocky 8 0:3.18-5.module+el8.10.0+1815+5fe7415e RLSA-2024:8846 Nov 8, 2024
criu-devel · RHEL 8 0:3.18-5.module+el8.10.0+22397+e3c95ba6 RHSA-2024:8846 Nov 5, 2024
criu-devel · almalinux 8 3.18-5.module_el8.10.0+3876+e55593a8 ALSA-2024:8846 Nov 5, 2024
criu-devel · ol 8 0:3.18-5.module+el8.10.0+90429+ee702c5c ELSA-2024-8846 Nov 5, 2024
criu-libs · RHEL 8 0:3.18-5.module+el8.10.0+22397+e3c95ba6 RHSA-2024:8846 Nov 5, 2024
criu-libs · almalinux 8 3.18-5.module_el8.10.0+3909+6e1c1eb7 ALSA-2024:8846 Nov 5, 2024
criu-libs · ol 8 0:3.18-5.module+el8.10.0+90429+ee702c5c ELSA-2024-8846 Nov 5, 2024
crun · RHEL 8 0:1.14.3-2.module+el8.10.0+22397+e3c95ba6 RHSA-2024:8846 Nov 5, 2024
crun · almalinux 8 1.14.3-2.module_el8.10.0+3845+87b84552 ALSA-2024:8846 Nov 5, 2024
crun · ol 8 0:1.14.3-2.module+el8.10.0+90429+ee702c5c ELSA-2024-8846 Nov 5, 2024
crun · rocky 8 0:1.14.3-2.module+el8.10.0+1815+5fe7415e RLSA-2024:8846 Nov 8, 2024
fuse-overlayfs · RHEL 8 0:1.13-1.module+el8.10.0+22397+e3c95ba6 RHSA-2024:8846 Nov 5, 2024
fuse-overlayfs · almalinux 8 1.13-1.module_el8.10.0+3909+6e1c1eb7 ALSA-2024:8846 Nov 5, 2024
fuse-overlayfs · ol 8 0:1.13-1.module+el8.10.0+90429+ee702c5c ELSA-2024-8846 Nov 5, 2024
fuse-overlayfs · rocky 8 0:1.13-1.module+el8.10.0+1815+5fe7415e RLSA-2024:8846 Nov 8, 2024
golang-github-containers-buildah · Debian 13.5 (trixie) 1.37.4+ds1-1 DEBIAN-CVE-2024-9675 Oct 9, 2024
golang-github-containers-buildah · Debian 14 1.37.4+ds1-1 DEBIAN-CVE-2024-9675 Oct 9, 2024
govulncheck-vulndb · opensuse-leap 15.6 0.0.20241030T212825-150000.1.9.1 SUSE-SU-2024:3911-1 Nov 5, 2024
govulncheck-vulndb · sles 15.6 0.0.20241030T212825-150000.1.9.1 SUSE-SU-2024:3911-1 Nov 5, 2024
libslirp · RHEL 8 0:4.4.0-2.module+el8.10.0+22397+e3c95ba6 RHSA-2024:8846 Nov 5, 2024
libslirp · almalinux 8 4.4.0-2.module_el8.10.0+3876+e55593a8 ALSA-2024:8846 Nov 5, 2024
libslirp · ol 8 0:4.4.0-2.module+el8.10.0+90429+ee702c5c ELSA-2024-8846 Nov 5, 2024
libslirp · rocky 8 0:4.4.0-2.module+el8.10.0+1815+5fe7415e RLSA-2024:8846 Nov 8, 2024
libslirp-devel · RHEL 8 0:4.4.0-2.module+el8.10.0+22397+e3c95ba6 RHSA-2024:8846 Nov 5, 2024
libslirp-devel · almalinux 8 4.4.0-2.module_el8.10.0+3909+6e1c1eb7 ALSA-2024:8846 Nov 5, 2024
libslirp-devel · ol 8 0:4.4.0-2.module+el8.10.0+90429+ee702c5c ELSA-2024-8846 Nov 5, 2024
netavark · RHEL 8 2:1.10.3-1.module+el8.10.0+22397+e3c95ba6 RHSA-2024:8846 Nov 5, 2024
netavark · almalinux 8 2:1.10.3-1.module_el8.10.0+3901+4b80ecd7 ALSA-2024:8846 Nov 5, 2024
netavark · ol 8 2:1.10.3-1.module+el8.10.0+90429+ee702c5c ELSA-2024-8846 Nov 5, 2024
netavark · rocky 8 2:1.10.3-1.module+el8.10.0+1815+5fe7415e RLSA-2024:8846 Nov 8, 2024
oci-seccomp-bpf-hook · RHEL 8 0:1.2.10-1.module+el8.10.0+22397+e3c95ba6 RHSA-2024:8846 Nov 5, 2024
oci-seccomp-bpf-hook · almalinux 8 1.2.10-1.module_el8.10.0+3909+6e1c1eb7 ALSA-2024:8846 Nov 5, 2024
oci-seccomp-bpf-hook · ol 8 0:1.2.10-1.module+el8.10.0+90429+ee702c5c ELSA-2024-8846 Nov 5, 2024
oci-seccomp-bpf-hook · rocky 8 0:1.2.10-1.module+el8.10.0+1815+5fe7415e RLSA-2024:8846 Nov 8, 2024
podman · RHEL 8 4:4.9.4-15.module+el8.10.0+22397+e3c95ba6 RHSA-2024:8846 Nov 5, 2024
podman · RHEL 9 4:5.2.2-9.el9_5 RHSA-2024:9454 Nov 12, 2024
podman · almalinux 8 4:4.9.4-15.module_el8.10.0+3909+6e1c1eb7 ALSA-2024:8846 Nov 5, 2024
podman · almalinux 9 4:5.2.2-9.el9_5 ALSA-2024:9454 Nov 12, 2024
podman · ol 8 4:4.9.4-15.0.1.module+el8.10.0+90429+ee702c5c ELSA-2024-8846 Nov 5, 2024
podman · ol 9 4:4.9.4-16.0.1.el9_4 ELSA-2024-9051 Nov 11, 2024
podman · opensuse-leap 15.6 4.9.5-150500.3.25.1 SUSE-SU-2024:3741-1 Oct 21, 2024
podman · rocky 8 4:4.9.4-15.module+el8.10.0+1880+8e896d1b RLSA-2024:8846 Nov 8, 2024
podman · rocky 9 4:4.9.4-16.el9_4 RLSA-2024:9051 Nov 19, 2024
podman · sles 15.6 4.9.5-150500.3.25.1 SUSE-SU-2024:3741-1 Oct 21, 2024
podman-catatonit · RHEL 8 4:4.9.4-15.module+el8.10.0+22397+e3c95ba6 RHSA-2024:8846 Nov 5, 2024
podman-catatonit · almalinux 8 4:4.9.4-15.module_el8.10.0+3909+6e1c1eb7 ALSA-2024:8846 Nov 5, 2024
podman-catatonit · ol 8 4:4.9.4-15.0.1.module+el8.10.0+90429+ee702c5c ELSA-2024-8846 Nov 5, 2024
podman-docker · RHEL 8 4:4.9.4-15.module+el8.10.0+22397+e3c95ba6 RHSA-2024:8846 Nov 5, 2024
podman-docker · RHEL 9 4:5.2.2-9.el9_5 RHSA-2024:9454 Nov 12, 2024
podman-docker · almalinux 8 4:4.9.4-15.module_el8.10.0+3909+6e1c1eb7 ALSA-2024:8846 Nov 5, 2024
podman-docker · almalinux 9 4:5.2.2-9.el9_5 ALSA-2024:9454 Nov 12, 2024
podman-docker · ol 8 4:4.9.4-15.0.1.module+el8.10.0+90429+ee702c5c ELSA-2024-8846 Nov 5, 2024
podman-docker · ol 9 4:4.9.4-16.0.1.el9_4 ELSA-2024-9051 Nov 11, 2024
podman-gvproxy · RHEL 8 4:4.9.4-15.module+el8.10.0+22397+e3c95ba6 RHSA-2024:8846 Nov 5, 2024
podman-gvproxy · almalinux 8 4:4.9.4-15.module_el8.10.0+3909+6e1c1eb7 ALSA-2024:8846 Nov 5, 2024
podman-gvproxy · ol 8 4:4.9.4-15.0.1.module+el8.10.0+90429+ee702c5c ELSA-2024-8846 Nov 5, 2024
podman-plugins · RHEL 8 4:4.9.4-15.module+el8.10.0+22397+e3c95ba6 RHSA-2024:8846 Nov 5, 2024
podman-plugins · RHEL 9 4:5.2.2-9.el9_5 RHSA-2024:9454 Nov 12, 2024
podman-plugins · almalinux 8 4:4.9.4-15.module_el8.10.0+3909+6e1c1eb7 ALSA-2024:8846 Nov 5, 2024
podman-plugins · almalinux 9 4:5.2.2-9.el9_5 ALSA-2024:9454 Nov 12, 2024
podman-plugins · ol 8 4:4.9.4-15.0.1.module+el8.10.0+90429+ee702c5c ELSA-2024-8846 Nov 5, 2024
podman-plugins · ol 9 4:4.9.4-16.0.1.el9_4 ELSA-2024-9051 Nov 11, 2024
podman-remote · RHEL 8 4:4.9.4-15.module+el8.10.0+22397+e3c95ba6 RHSA-2024:8846 Nov 5, 2024
podman-remote · RHEL 9 4:5.2.2-9.el9_5 RHSA-2024:9454 Nov 12, 2024
podman-remote · almalinux 8 4:4.9.4-15.module_el8.10.0+3909+6e1c1eb7 ALSA-2024:8846 Nov 5, 2024
podman-remote · almalinux 9 4:5.2.2-9.el9_5 ALSA-2024:9454 Nov 12, 2024
podman-remote · ol 8 4:4.9.4-15.0.1.module+el8.10.0+90429+ee702c5c ELSA-2024-8846 Nov 5, 2024
podman-remote · ol 9 4:4.9.4-16.0.1.el9_4 ELSA-2024-9051 Nov 11, 2024
podman-tests · RHEL 8 4:4.9.4-15.module+el8.10.0+22397+e3c95ba6 RHSA-2024:8846 Nov 5, 2024
podman-tests · RHEL 9 4:5.2.2-9.el9_5 RHSA-2024:9454 Nov 12, 2024
podman-tests · almalinux 8 4:4.9.4-15.module_el8.10.0+3909+6e1c1eb7 ALSA-2024:8846 Nov 5, 2024
podman-tests · almalinux 9 4:5.2.2-9.el9_5 ALSA-2024:9454 Nov 12, 2024
podman-tests · ol 8 4:4.9.4-15.0.1.module+el8.10.0+90429+ee702c5c ELSA-2024-8846 Nov 5, 2024
podman-tests · ol 9 4:4.9.4-16.0.1.el9_4 ELSA-2024-9051 Nov 11, 2024
python-podman · rocky 8 0:4.9.0-2.module+el8.10.0+1843+6892ab28 RLSA-2024:8846 Nov 8, 2024
python3-criu · RHEL 8 0:3.18-5.module+el8.10.0+22397+e3c95ba6 RHSA-2024:8846 Nov 5, 2024
python3-criu · almalinux 8 3.18-5.module_el8.10.0+3858+6ad51f9f ALSA-2024:8846 Nov 5, 2024
python3-criu · ol 8 0:3.18-5.module+el8.10.0+90429+ee702c5c ELSA-2024-8846 Nov 5, 2024
python3-podman · RHEL 8 0:4.9.0-2.module+el8.10.0+22397+e3c95ba6 RHSA-2024:8846 Nov 5, 2024
python3-podman · almalinux 8 4.9.0-2.module_el8.10.0+3876+e55593a8 ALSA-2024:8846 Nov 5, 2024
python3-podman · ol 8 0:4.9.0-2.module+el8.10.0+90429+ee702c5c ELSA-2024-8846 Nov 5, 2024
runc · RHEL 8 1:1.1.12-5.module+el8.10.0+22397+e3c95ba6 RHSA-2024:8846 Nov 5, 2024
runc · almalinux 8 1:1.1.12-5.module_el8.10.0+3909+6e1c1eb7 ALSA-2024:8846 Nov 5, 2024
runc · ol 8 1:1.1.12-5.module+el8.10.0+90429+ee702c5c ELSA-2024-8846 Nov 5, 2024
runc · rocky 8 1:1.1.12-5.module+el8.10.0+1874+ce489889 RLSA-2024:8846 Nov 8, 2024
skopeo · RHEL 8 2:1.14.5-3.module+el8.10.0+22397+e3c95ba6 RHSA-2024:8846 Nov 5, 2024
skopeo · almalinux 8 2:1.14.5-3.module_el8.10.0+3901+4b80ecd7 ALSA-2024:8846 Nov 5, 2024
skopeo · ol 8 2:1.14.5-3.module+el8.10.0+90429+ee702c5c ELSA-2024-8846 Nov 5, 2024
skopeo · rocky 8 2:1.14.5-3.module+el8.10.0+1843+6892ab28 RLSA-2024:8846 Nov 8, 2024
skopeo-tests · RHEL 8 2:1.14.5-3.module+el8.10.0+22397+e3c95ba6 RHSA-2024:8846 Nov 5, 2024
skopeo-tests · almalinux 8 2:1.14.5-3.module_el8.10.0+3876+e55593a8 ALSA-2024:8846 Nov 5, 2024
skopeo-tests · ol 8 2:1.14.5-3.module+el8.10.0+90429+ee702c5c ELSA-2024-8846 Nov 5, 2024
slirp4netns · RHEL 8 0:1.2.3-1.module+el8.10.0+22397+e3c95ba6 RHSA-2024:8846 Nov 5, 2024
slirp4netns · almalinux 8 1.2.3-1.module_el8.10.0+3845+87b84552 ALSA-2024:8846 Nov 5, 2024
slirp4netns · ol 8 0:1.2.3-1.module+el8.10.0+90429+ee702c5c ELSA-2024-8846 Nov 5, 2024
slirp4netns · rocky 8 0:1.2.3-1.module+el8.10.0+1815+5fe7415e RLSA-2024:8846 Nov 8, 2024
toolbox · RHEL 8 0:0.0.99.5-2.module+el8.10.0+22397+e3c95ba6 RHSA-2024:8846 Nov 5, 2024
toolbox · almalinux 8 0.0.99.5-2.module_el8.10.0+3901+4b80ecd7 ALSA-2024:8846 Nov 5, 2024
toolbox · rocky 8 0:0.0.99.5-2.module+el8.10.0+1815+5fe7415e.rocky.0.2.rocky.0.2 RLSA-2024:8846 Nov 8, 2024
toolbox-tests · RHEL 8 0:0.0.99.5-2.module+el8.10.0+22397+e3c95ba6 RHSA-2024:8846 Nov 5, 2024
toolbox-tests · almalinux 8 0.0.99.5-2.module_el8.10.0+3858+6ad51f9f ALSA-2024:8846 Nov 5, 2024
udica · RHEL 8 0:0.2.6-21.module+el8.10.0+22397+e3c95ba6 RHSA-2024:8846 Nov 5, 2024
udica · almalinux 8 0.2.6-21.module_el8.10.0+3876+e55593a8 ALSA-2024:8846 Nov 5, 2024
udica · rocky 8 0:0.2.6-21.module+el8.10.0+1815+5fe7415e RLSA-2024:8846 Nov 8, 2024

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.