CVE-2024-9676

libslirp-devel: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se...

CVE-2024-9676 is fixed in 36 products on 1 platform, first by DEBIAN-CVE-2024-9676, released October 15, 2024. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
6.5
Moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0133
71st percentile

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents (CVE-2021-33198) * podman: podman machine spawns gvproxy with port bound to all IPs (CVE-2021-4024) * Podman: Buildah: CRI-O: symlink traversal vulnerability in the containers/storage library can cause Denial of Service (DoS) (CVE-2024-9676) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
aardvark-dns · RHEL 8 2:1.10.1-2.module+el8.10.0+22417+2fb00970 RHSA-2024:10289 Nov 26, 2024
aardvark-dns · almalinux 8 2:1.10.1-2.module_el8.10.0+3909+6e1c1eb7 ALSA-2024:10289 Nov 26, 2024
aardvark-dns · ol 8 2:1.10.1-2.module+el8.10.0+90449+0b7c8529 ELSA-2024-10289 Nov 27, 2024
aardvark-dns · rocky 8 2:1.10.1-2.module+el8.10.0+1874+ce489889 RLSA-2024:10289 Dec 19, 2024
buildah · RHEL 8 2:1.33.11-1.module+el8.10.0+22417+2fb00970 RHSA-2024:10289 Nov 26, 2024
buildah · RHEL 9 2:1.37.5-1.el9_5 RHSA-2024:9459 Nov 12, 2024
buildah · almalinux 8 2:1.33.11-1.module_el8.10.0+3926+f12484f5 ALSA-2024:10289 Nov 26, 2024
buildah · almalinux 9 2:1.37.5-1.el9_5 ALSA-2024:9459 Nov 12, 2024
buildah · ol 8 2:1.33.11-1.module+el8.10.0+90449+0b7c8529 ELSA-2024-10289 Nov 27, 2024
buildah · ol 9 2:1.37.5-1.0.1.el9_5 ELSA-2024-9459 Nov 20, 2024
buildah · opensuse-leap 15.6 1.35.4-150500.3.19.1 SUSE-SU-2024:3754-1 Oct 24, 2024
buildah · rocky 8 2:1.33.11-1.module+el8.10.0+1896+b18fa106 RLSA-2024:10289 Dec 19, 2024
buildah · sles 15.6 1.35.4-150500.3.19.1 SUSE-SU-2024:3754-1 Oct 24, 2024
buildah-tests · RHEL 8 2:1.33.11-1.module+el8.10.0+22417+2fb00970 RHSA-2024:10289 Nov 26, 2024
buildah-tests · RHEL 9 2:1.37.5-1.el9_5 RHSA-2024:9459 Nov 12, 2024
buildah-tests · almalinux 8 2:1.33.11-1.module_el8.10.0+3926+f12484f5 ALSA-2024:10289 Nov 26, 2024
buildah-tests · almalinux 9 2:1.37.5-1.el9_5 ALSA-2024:9459 Nov 12, 2024
buildah-tests · ol 8 2:1.33.11-1.module+el8.10.0+90449+0b7c8529 ELSA-2024-10289 Nov 27, 2024
buildah-tests · ol 9 2:1.37.5-1.0.1.el9_5 ELSA-2024-9459 Nov 20, 2024
cockpit-podman · RHEL 8 0:84.1-1.module+el8.10.0+22417+2fb00970 RHSA-2024:10289 Nov 26, 2024
cockpit-podman · almalinux 8 84.1-1.module_el8.10.0+3876+e55593a8 ALSA-2024:10289 Nov 26, 2024
cockpit-podman · ol 8 0:84.1-1.module+el8.10.0+90449+0b7c8529 ELSA-2024-10289 Nov 27, 2024
cockpit-podman · rocky 8 0:84.1-1.module+el8.10.0+1815+5fe7415e RLSA-2024:10289 Dec 19, 2024
conmon · RHEL 8 3:2.1.10-1.module+el8.10.0+22417+2fb00970 RHSA-2024:10289 Nov 26, 2024
conmon · almalinux 8 3:2.1.10-1.module_el8.10.0+3876+e55593a8 ALSA-2024:10289 Nov 26, 2024
conmon · ol 8 3:2.1.10-1.module+el8.10.0+90449+0b7c8529 ELSA-2024-10289 Nov 27, 2024
conmon · rocky 8 3:2.1.10-1.module+el8.10.0+1815+5fe7415e RLSA-2024:10289 Dec 19, 2024
container-selinux · RHEL 8 2:2.229.0-2.module+el8.10.0+22417+2fb00970 RHSA-2024:10289 Nov 26, 2024
container-selinux · almalinux 8 2:2.229.0-2.module_el8.10.0+3909+6e1c1eb7 ALSA-2024:10289 Nov 26, 2024
container-selinux · ol 8 2:2.229.0-2.module+el8.10.0+90449+0b7c8529 ELSA-2024-10289 Nov 27, 2024
container-selinux · rocky 8 2:2.229.0-2.module+el8.10.0+1815+5fe7415e RLSA-2024:10289 Dec 19, 2024
containernetworking-plugins · RHEL 8 1:1.4.0-5.module+el8.10.0+22417+2fb00970 RHSA-2024:10289 Nov 26, 2024
containernetworking-plugins · almalinux 8 1:1.4.0-5.module_el8.10.0+3876+e55593a8 ALSA-2024:10289 Nov 26, 2024
containernetworking-plugins · ol 8 1:1.4.0-5.module+el8.10.0+90449+0b7c8529 ELSA-2024-10289 Nov 27, 2024
containernetworking-plugins · rocky 8 1:1.4.0-5.module+el8.10.0+1843+6892ab28 RLSA-2024:10289 Dec 19, 2024
containers-common · RHEL 8 2:1-82.module+el8.10.0+22417+2fb00970 RHSA-2024:10289 Nov 26, 2024
containers-common · almalinux 8 2:1-82.module_el8.10.0+3876+e55593a8 ALSA-2024:10289 Nov 26, 2024
containers-common · ol 8 2:1-82.0.1.module+el8.10.0+90449+0b7c8529 ELSA-2024-10289 Nov 27, 2024
containers-common · rocky 8 2:1-82.module+el8.10.0+1843+6892ab28 RLSA-2024:10289 Dec 19, 2024
crit · RHEL 8 0:3.18-5.module+el8.10.0+22417+2fb00970 RHSA-2024:10289 Nov 26, 2024
crit · almalinux 8 3.18-5.module_el8.10.0+3901+4b80ecd7 ALSA-2024:10289 Nov 26, 2024
crit · ol 8 0:3.18-5.module+el8.10.0+90449+0b7c8529 ELSA-2024-10289 Nov 27, 2024
criu · RHEL 8 0:3.18-5.module+el8.10.0+22417+2fb00970 RHSA-2024:10289 Nov 26, 2024
criu · almalinux 8 3.18-5.module_el8.10.0+3926+f12484f5 ALSA-2024:10289 Nov 26, 2024
criu · ol 8 0:3.18-5.module+el8.10.0+90449+0b7c8529 ELSA-2024-10289 Nov 27, 2024
criu · rocky 8 0:3.18-5.module+el8.10.0+1815+5fe7415e RLSA-2024:10289 Dec 19, 2024
criu-devel · RHEL 8 0:3.18-5.module+el8.10.0+22417+2fb00970 RHSA-2024:10289 Nov 26, 2024
criu-devel · almalinux 8 3.18-5.module_el8.10.0+3876+e55593a8 ALSA-2024:10289 Nov 26, 2024
criu-devel · ol 8 0:3.18-5.module+el8.10.0+90449+0b7c8529 ELSA-2024-10289 Nov 27, 2024
criu-libs · RHEL 8 0:3.18-5.module+el8.10.0+22417+2fb00970 RHSA-2024:10289 Nov 26, 2024
criu-libs · almalinux 8 3.18-5.module_el8.10.0+3845+87b84552 ALSA-2024:10289 Nov 26, 2024
criu-libs · ol 8 0:3.18-5.module+el8.10.0+90449+0b7c8529 ELSA-2024-10289 Nov 27, 2024
crun · RHEL 8 0:1.14.3-2.module+el8.10.0+22417+2fb00970 RHSA-2024:10289 Nov 26, 2024
crun · almalinux 8 1.14.3-2.module_el8.10.0+3845+87b84552 ALSA-2024:10289 Nov 26, 2024
crun · ol 8 0:1.14.3-2.module+el8.10.0+90449+0b7c8529 ELSA-2024-10289 Nov 27, 2024
crun · rocky 8 0:1.14.3-2.module+el8.10.0+1815+5fe7415e RLSA-2024:10289 Dec 19, 2024
fuse-overlayfs · RHEL 8 0:1.13-1.module+el8.10.0+22417+2fb00970 RHSA-2024:10289 Nov 26, 2024
fuse-overlayfs · almalinux 8 1.13-1.module_el8.10.0+3909+6e1c1eb7 ALSA-2024:10289 Nov 26, 2024
fuse-overlayfs · ol 8 0:1.13-1.module+el8.10.0+90449+0b7c8529 ELSA-2024-10289 Nov 27, 2024
fuse-overlayfs · rocky 8 0:1.13-1.module+el8.10.0+1815+5fe7415e RLSA-2024:10289 Dec 19, 2024
golang-github-containers-storage · Debian 13.5 (trixie) 1.55.1+ds1-1 DEBIAN-CVE-2024-9676 Oct 15, 2024
golang-github-containers-storage · Debian 14 1.55.1+ds1-1 DEBIAN-CVE-2024-9676 Oct 15, 2024
libslirp · RHEL 8 0:4.4.0-2.module+el8.10.0+22417+2fb00970 RHSA-2024:10289 Nov 26, 2024
libslirp · almalinux 8 4.4.0-2.module_el8.10.0+3876+e55593a8 ALSA-2024:10289 Nov 26, 2024
libslirp · ol 8 0:4.4.0-2.module+el8.10.0+90449+0b7c8529 ELSA-2024-10289 Nov 27, 2024
libslirp · rocky 8 0:4.4.0-2.module+el8.10.0+1815+5fe7415e RLSA-2024:10289 Dec 19, 2024
libslirp-devel · RHEL 8 0:4.4.0-2.module+el8.10.0+22417+2fb00970 RHSA-2024:10289 Nov 26, 2024
libslirp-devel · almalinux 8 4.4.0-2.module_el8.10.0+3909+6e1c1eb7 ALSA-2024:10289 Nov 26, 2024
libslirp-devel · ol 8 0:4.4.0-2.module+el8.10.0+90449+0b7c8529 ELSA-2024-10289 Nov 27, 2024
netavark · RHEL 8 2:1.10.3-1.module+el8.10.0+22417+2fb00970 RHSA-2024:10289 Nov 26, 2024
netavark · almalinux 8 2:1.10.3-1.module_el8.10.0+3926+f12484f5 ALSA-2024:10289 Nov 26, 2024
netavark · ol 8 2:1.10.3-1.module+el8.10.0+90449+0b7c8529 ELSA-2024-10289 Nov 27, 2024
netavark · rocky 8 2:1.10.3-1.module+el8.10.0+1815+5fe7415e RLSA-2024:10289 Dec 19, 2024
oci-seccomp-bpf-hook · RHEL 8 0:1.2.10-1.module+el8.10.0+22417+2fb00970 RHSA-2024:10289 Nov 26, 2024
oci-seccomp-bpf-hook · almalinux 8 1.2.10-1.module_el8.10.0+3909+6e1c1eb7 ALSA-2024:10289 Nov 26, 2024
oci-seccomp-bpf-hook · ol 8 0:1.2.10-1.module+el8.10.0+90449+0b7c8529 ELSA-2024-10289 Nov 27, 2024
oci-seccomp-bpf-hook · rocky 8 0:1.2.10-1.module+el8.10.0+1815+5fe7415e RLSA-2024:10289 Dec 19, 2024
podman · RHEL 8 4:4.9.4-18.module+el8.10.0+22417+2fb00970 RHSA-2024:10289 Nov 26, 2024
podman · RHEL 9 4:5.2.2-9.el9_5 RHSA-2024:9454 Nov 12, 2024
podman · almalinux 8 4:4.9.4-18.module_el8.10.0+3926+f12484f5 ALSA-2024:10289 Nov 26, 2024
podman · almalinux 9 4:5.2.2-9.el9_5 ALSA-2024:9454 Nov 12, 2024
podman · ol 8 4:4.9.4-18.0.1.module+el8.10.0+90449+0b7c8529 ELSA-2024-10289 Nov 27, 2024
podman · ol 9 4:4.9.4-16.0.1.el9_4 ELSA-2024-9051 Nov 11, 2024
podman · opensuse-leap 15.6 4.9.5-150500.3.28.1 SUSE-SU-2024:3753-1 Oct 24, 2024
podman · rocky 8 4:4.9.4-18.module+el8.10.0+1896+b18fa106 RLSA-2024:10289 Dec 19, 2024
podman · rocky 9 4:4.9.4-16.el9_4 RLSA-2024:9051 Nov 19, 2024
podman · sles 15.6 4.9.5-150500.3.28.1 SUSE-SU-2024:3753-1 Oct 24, 2024
podman-catatonit · RHEL 8 4:4.9.4-18.module+el8.10.0+22417+2fb00970 RHSA-2024:10289 Nov 26, 2024
podman-catatonit · almalinux 8 4:4.9.4-18.module_el8.10.0+3926+f12484f5 ALSA-2024:10289 Nov 26, 2024
podman-catatonit · ol 8 4:4.9.4-18.0.1.module+el8.10.0+90449+0b7c8529 ELSA-2024-10289 Nov 27, 2024
podman-docker · RHEL 8 4:4.9.4-18.module+el8.10.0+22417+2fb00970 RHSA-2024:10289 Nov 26, 2024
podman-docker · RHEL 9 4:5.2.2-9.el9_5 RHSA-2024:9454 Nov 12, 2024
podman-docker · almalinux 8 4:4.9.4-18.module_el8.10.0+3926+f12484f5 ALSA-2024:10289 Nov 26, 2024
podman-docker · almalinux 9 4:5.2.2-9.el9_5 ALSA-2024:9454 Nov 12, 2024
podman-docker · ol 8 4:4.9.4-18.0.1.module+el8.10.0+90449+0b7c8529 ELSA-2024-10289 Nov 27, 2024
podman-docker · ol 9 4:4.9.4-16.0.1.el9_4 ELSA-2024-9051 Nov 11, 2024
podman-gvproxy · RHEL 8 4:4.9.4-18.module+el8.10.0+22417+2fb00970 RHSA-2024:10289 Nov 26, 2024
podman-gvproxy · almalinux 8 4:4.9.4-18.module_el8.10.0+3926+f12484f5 ALSA-2024:10289 Nov 26, 2024
podman-gvproxy · ol 8 4:4.9.4-18.0.1.module+el8.10.0+90449+0b7c8529 ELSA-2024-10289 Nov 27, 2024
podman-plugins · RHEL 8 4:4.9.4-18.module+el8.10.0+22417+2fb00970 RHSA-2024:10289 Nov 26, 2024
podman-plugins · RHEL 9 4:5.2.2-9.el9_5 RHSA-2024:9454 Nov 12, 2024
podman-plugins · almalinux 8 4:4.9.4-18.module_el8.10.0+3926+f12484f5 ALSA-2024:10289 Nov 26, 2024
podman-plugins · almalinux 9 4:5.2.2-9.el9_5 ALSA-2024:9454 Nov 12, 2024
podman-plugins · ol 8 4:4.9.4-18.0.1.module+el8.10.0+90449+0b7c8529 ELSA-2024-10289 Nov 27, 2024
podman-plugins · ol 9 4:4.9.4-16.0.1.el9_4 ELSA-2024-9051 Nov 11, 2024
podman-remote · RHEL 8 4:4.9.4-18.module+el8.10.0+22417+2fb00970 RHSA-2024:10289 Nov 26, 2024
podman-remote · RHEL 9 4:5.2.2-9.el9_5 RHSA-2024:9454 Nov 12, 2024
podman-remote · almalinux 8 4:4.9.4-18.module_el8.10.0+3926+f12484f5 ALSA-2024:10289 Nov 26, 2024
podman-remote · almalinux 9 4:5.2.2-9.el9_5 ALSA-2024:9454 Nov 12, 2024
podman-remote · ol 8 4:4.9.4-18.0.1.module+el8.10.0+90449+0b7c8529 ELSA-2024-10289 Nov 27, 2024
podman-remote · ol 9 4:4.9.4-16.0.1.el9_4 ELSA-2024-9051 Nov 11, 2024
podman-tests · RHEL 8 4:4.9.4-18.module+el8.10.0+22417+2fb00970 RHSA-2024:10289 Nov 26, 2024
podman-tests · RHEL 9 4:5.2.2-9.el9_5 RHSA-2024:9454 Nov 12, 2024
podman-tests · almalinux 8 4:4.9.4-18.module_el8.10.0+3926+f12484f5 ALSA-2024:10289 Nov 26, 2024
podman-tests · almalinux 9 4:5.2.2-9.el9_5 ALSA-2024:9454 Nov 12, 2024
podman-tests · ol 8 4:4.9.4-18.0.1.module+el8.10.0+90449+0b7c8529 ELSA-2024-10289 Nov 27, 2024
podman-tests · ol 9 4:4.9.4-16.0.1.el9_4 ELSA-2024-9051 Nov 11, 2024
python-podman · rocky 8 0:4.9.0-3.module+el8.10.0+1896+b18fa106 RLSA-2024:10289 Dec 19, 2024
python3-criu · RHEL 8 0:3.18-5.module+el8.10.0+22417+2fb00970 RHSA-2024:10289 Nov 26, 2024
python3-criu · almalinux 8 3.18-5.module_el8.10.0+3858+6ad51f9f ALSA-2024:10289 Nov 26, 2024
python3-criu · ol 8 0:3.18-5.module+el8.10.0+90449+0b7c8529 ELSA-2024-10289 Nov 27, 2024
python3-podman · RHEL 8 0:4.9.0-3.module+el8.10.0+22417+2fb00970 RHSA-2024:10289 Nov 26, 2024
python3-podman · almalinux 8 4.9.0-3.module_el8.10.0+3926+f12484f5 ALSA-2024:10289 Nov 26, 2024
python3-podman · ol 8 0:4.9.0-3.module+el8.10.0+90449+0b7c8529 ELSA-2024-10289 Nov 27, 2024
runc · RHEL 8 1:1.1.12-5.module+el8.10.0+22417+2fb00970 RHSA-2024:10289 Nov 26, 2024
runc · almalinux 8 1:1.1.12-5.module_el8.10.0+3909+6e1c1eb7 ALSA-2024:10289 Nov 26, 2024
runc · ol 8 1:1.1.12-5.module+el8.10.0+90449+0b7c8529 ELSA-2024-10289 Nov 27, 2024
runc · rocky 8 1:1.1.12-5.module+el8.10.0+1874+ce489889 RLSA-2024:10289 Dec 19, 2024
skopeo · RHEL 8 2:1.14.5-3.module+el8.10.0+22417+2fb00970 RHSA-2024:10289 Nov 26, 2024
skopeo · almalinux 8 2:1.14.5-3.module_el8.10.0+3926+f12484f5 ALSA-2024:10289 Nov 26, 2024
skopeo · ol 8 2:1.14.5-3.module+el8.10.0+90449+0b7c8529 ELSA-2024-10289 Nov 27, 2024
skopeo · rocky 8 2:1.14.5-3.module+el8.10.0+1843+6892ab28 RLSA-2024:10289 Dec 19, 2024
skopeo-tests · RHEL 8 2:1.14.5-3.module+el8.10.0+22417+2fb00970 RHSA-2024:10289 Nov 26, 2024
skopeo-tests · almalinux 8 2:1.14.5-3.module_el8.10.0+3876+e55593a8 ALSA-2024:10289 Nov 26, 2024
skopeo-tests · ol 8 2:1.14.5-3.module+el8.10.0+90449+0b7c8529 ELSA-2024-10289 Nov 27, 2024
slirp4netns · RHEL 8 0:1.2.3-1.module+el8.10.0+22417+2fb00970 RHSA-2024:10289 Nov 26, 2024
slirp4netns · almalinux 8 1.2.3-1.module_el8.10.0+3845+87b84552 ALSA-2024:10289 Nov 26, 2024
slirp4netns · ol 8 0:1.2.3-1.module+el8.10.0+90449+0b7c8529 ELSA-2024-10289 Nov 27, 2024
slirp4netns · rocky 8 0:1.2.3-1.module+el8.10.0+1815+5fe7415e RLSA-2024:10289 Dec 19, 2024
toolbox · RHEL 8 0:0.0.99.5-2.module+el8.10.0+22417+2fb00970 RHSA-2024:10289 Nov 26, 2024
toolbox · almalinux 8 0.0.99.5-2.module_el8.10.0+3901+4b80ecd7 ALSA-2024:10289 Nov 26, 2024
toolbox · rocky 8 0:0.0.99.5-2.module+el8.10.0+1815+5fe7415e.rocky.0.2.rocky.0.2 RLSA-2024:10289 Dec 19, 2024
toolbox-tests · RHEL 8 0:0.0.99.5-2.module+el8.10.0+22417+2fb00970 RHSA-2024:10289 Nov 26, 2024
toolbox-tests · almalinux 8 0.0.99.5-2.module_el8.10.0+3858+6ad51f9f ALSA-2024:10289 Nov 26, 2024
udica · RHEL 8 0:0.2.6-21.module+el8.10.0+22417+2fb00970 RHSA-2024:10289 Nov 26, 2024
udica · almalinux 8 0.2.6-21.module_el8.10.0+3926+f12484f5 ALSA-2024:10289 Nov 26, 2024
udica · ol 8 0:0.2.6-21.module+el8.10.0+90449+0b7c8529 ELSA-2024-10289 Nov 27, 2024
udica · rocky 8 0:0.2.6-21.module+el8.10.0+1815+5fe7415e RLSA-2024:10289 Dec 19, 2024

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.