CVE-2024-11218: Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile

Deferred

AliasesSUSE-SU-2025:0301-1SUSE-SU-2025:0382-1RHSA-2025:0878+30 more

Published 22-01-2025Last modified 30-10-2026

Vulnerability summary

CVE-2024-11218 is a high (CVSS 8.6) Improper Privilege Management vulnerability in buildah. EPSS estimates a 0.36% chance of exploitation in the next 30 days, higher than 30.4% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 8.6, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

8.6/10

010

High · v3.1 (CVE.org)

EPSS score

0.36%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 11 · Related 12

OPENSUSE-SU-2025:14710-1 RHSA-2025:0830 RHSA-2025:1908 RHSA-2025:2703 SUSE-SU-2025:0267-1 SUSE-SU-2025:0297-1+9 more

Timeline

22-01-2025
PublishedVulnerability first disclosed.
30-10-2026
Last modifiedVulnerability information updated.

Description

A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and directories on the host.

CVSS metrics

9 scores · 9 sources · 1 version

v3.18.6

EPSS trend

Probability

0.36%

Chance of exploitation in the next 30 days

Percentile

30%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.36% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-269Improper Privilege ManagementThe product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Affected systems

Version check

Known conditions: local access, no authentication, user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat67 products

aardvark-dns< 2:1.0.1-40.module+el8.6.0+22769+fa0fe772 | < 2:1.5.0-2.module+el8.8.0+22334+bb93e398 | < 2:1.10.1-2.module+el8.10.0+22417+2fb00970
buildah< 2:1.37.6-1.el9_5 | < 1:1.26.9-1.el9_0 | < 2:1.33.12-2.el9_4 | < 1:1.26.9-2.module+el8.6.0+22769+fa0fe772 | < 1:1.29.5-1.module+el8.8.0+22779+ce927503 | < 1:1.29.5-1.el9_2 | < 2:1.33.12-1.module+el8.10.0+22744+7794713b | < 2:1.33.12-1.rhaos4.16.el8 | < 2:1.33.12-1.rhaos4.16.el9 | < 2:1.33.12-1.rhaos4.17.el8 | < 2:1.33.12-1.rhaos4.17.el9 | < 1:1.29.5-1.rhaos4.15.el8 | < 1:1.29.5-1.rhaos4.15.el9 | < 1:1.29.5-1.rhaos4.14.el8 | < 1:1.29.5-1.rhaos4.14.el9
buildah-debuginfo< 2:1.37.6-1.el9_5 | < 1:1.26.9-1.el9_0 | < 2:1.33.12-2.el9_4 | < 1:1.26.9-2.module+el8.6.0+22769+fa0fe772 | < 1:1.29.5-1.module+el8.8.0+22779+ce927503 | < 1:1.29.5-1.el9_2 | < 2:1.33.12-1.module+el8.10.0+22744+7794713b | < 2:1.33.12-1.rhaos4.16.el8 | < 2:1.33.12-1.rhaos4.16.el9 | < 2:1.33.12-1.rhaos4.17.el8 | < 2:1.33.12-1.rhaos4.17.el9 | < 1:1.29.5-1.rhaos4.15.el8 | < 1:1.29.5-1.rhaos4.15.el9 | < 1:1.29.5-1.rhaos4.14.el8 | < 1:1.29.5-1.rhaos4.14.el9
buildah-debugsource< 2:1.37.6-1.el9_5 | < 1:1.26.9-1.el9_0 | < 2:1.33.12-2.el9_4 | < 1:1.26.9-2.module+el8.6.0+22769+fa0fe772 | < 1:1.29.5-1.module+el8.8.0+22779+ce927503 | < 1:1.29.5-1.el9_2 | < 2:1.33.12-1.module+el8.10.0+22744+7794713b | < 2:1.33.12-1.rhaos4.16.el8 | < 2:1.33.12-1.rhaos4.16.el9 | < 2:1.33.12-1.rhaos4.17.el8 | < 2:1.33.12-1.rhaos4.17.el9 | < 1:1.29.5-1.rhaos4.15.el8 | < 1:1.29.5-1.rhaos4.15.el9 | < 1:1.29.5-1.rhaos4.14.el8 | < 1:1.29.5-1.rhaos4.14.el9
buildah-tests< 2:1.37.6-1.el9_5 | < 1:1.26.9-1.el9_0 | < 2:1.33.12-2.el9_4 | < 1:1.26.9-2.module+el8.6.0+22769+fa0fe772 | < 1:1.29.5-1.module+el8.8.0+22779+ce927503 | < 1:1.29.5-1.el9_2 | < 2:1.33.12-1.module+el8.10.0+22744+7794713b | < 2:1.33.12-1.rhaos4.16.el8 | < 2:1.33.12-1.rhaos4.16.el9 | < 2:1.33.12-1.rhaos4.17.el8 | < 2:1.33.12-1.rhaos4.17.el9 | < 1:1.29.5-1.rhaos4.15.el8 | < 1:1.29.5-1.rhaos4.15.el9 | < 1:1.29.5-1.rhaos4.14.el8 | < 1:1.29.5-1.rhaos4.14.el9

buildah-tests-debuginfo< 2:1.37.6-1.el9_5 | < 1:1.26.9-1.el9_0 | < 2:1.33.12-2.el9_4 | < 1:1.26.9-2.module+el8.6.0+22769+fa0fe772 | < 1:1.29.5-1.module+el8.8.0+22779+ce927503 | < 1:1.29.5-1.el9_2 | < 2:1.33.12-1.module+el8.10.0+22744+7794713b | < 2:1.33.12-1.rhaos4.16.el8 | < 2:1.33.12-1.rhaos4.16.el9 | < 2:1.33.12-1.rhaos4.17.el8 | < 2:1.33.12-1.rhaos4.17.el9 | < 1:1.29.5-1.rhaos4.15.el8 | < 1:1.29.5-1.rhaos4.15.el9 | < 1:1.29.5-1.rhaos4.14.el8 | < 1:1.29.5-1.rhaos4.14.el9
cockpit-podman< 0:49.1-1.module+el8.6.0+22769+fa0fe772 | < 0:63.1-1.module+el8.8.0+22334+bb93e398 | < 0:84.1-1.module+el8.10.0+22417+2fb00970
conmon< 2:2.1.4-1.module+el8.6.0+22769+fa0fe772 | < 3:2.1.6-1.module+el8.8.0+22334+bb93e398 | < 3:2.1.10-1.module+el8.10.0+22417+2fb00970
conmon-debuginfo< 2:2.1.4-1.module+el8.6.0+22769+fa0fe772 | < 3:2.1.6-1.module+el8.8.0+22334+bb93e398 | < 3:2.1.10-1.module+el8.10.0+22417+2fb00970
conmon-debugsource< 2:2.1.4-1.module+el8.6.0+22769+fa0fe772 | < 3:2.1.6-1.module+el8.8.0+22334+bb93e398 | < 3:2.1.10-1.module+el8.10.0+22417+2fb00970
container-selinux< 2:2.189.0-1.module+el8.6.0+22769+fa0fe772 | < 2:2.229.0-1.module+el8.8.0+22334+bb93e398 | < 2:2.229.0-2.module+el8.10.0+22417+2fb00970
containernetworking-plugins< 1:1.1.1-5.module+el8.6.0+22769+fa0fe772 | < 1:1.2.0-2.module+el8.8.0+22334+bb93e398 | < 1:1.4.0-5.module+el8.10.0+22417+2fb00970
containernetworking-plugins-debuginfo< 1:1.1.1-5.module+el8.6.0+22769+fa0fe772 | < 1:1.2.0-2.module+el8.8.0+22334+bb93e398 | < 1:1.4.0-5.module+el8.10.0+22417+2fb00970
containernetworking-plugins-debugsource< 1:1.1.1-5.module+el8.6.0+22769+fa0fe772 | < 1:1.2.0-2.module+el8.8.0+22334+bb93e398 | < 1:1.4.0-5.module+el8.10.0+22417+2fb00970
containers-common< 2:1-40.module+el8.6.0+22769+fa0fe772 | < 2:1-67.module+el8.8.0+22334+bb93e398 | < 2:1-82.module+el8.10.0+22417+2fb00970
crit< 0:3.15-3.module+el8.6.0+22769+fa0fe772 | < 0:3.15-4.module+el8.8.0+22334+bb93e398 | < 0:3.18-5.module+el8.10.0+22417+2fb00970
criu< 0:3.15-3.module+el8.6.0+22769+fa0fe772 | < 0:3.15-4.module+el8.8.0+22334+bb93e398 | < 0:3.18-5.module+el8.10.0+22417+2fb00970
criu-debuginfo< 0:3.15-3.module+el8.6.0+22769+fa0fe772 | < 0:3.15-4.module+el8.8.0+22334+bb93e398 | < 0:3.18-5.module+el8.10.0+22417+2fb00970
criu-debugsource< 0:3.15-3.module+el8.6.0+22769+fa0fe772 | < 0:3.15-4.module+el8.8.0+22334+bb93e398 | < 0:3.18-5.module+el8.10.0+22417+2fb00970
criu-devel< 0:3.15-3.module+el8.6.0+22769+fa0fe772 | < 0:3.15-4.module+el8.8.0+22334+bb93e398 | < 0:3.18-5.module+el8.10.0+22417+2fb00970
criu-libs< 0:3.15-3.module+el8.6.0+22769+fa0fe772 | < 0:3.15-4.module+el8.8.0+22334+bb93e398 | < 0:3.18-5.module+el8.10.0+22417+2fb00970
criu-libs-debuginfo< 0:3.15-3.module+el8.6.0+22769+fa0fe772 | < 0:3.15-4.module+el8.8.0+22334+bb93e398 | < 0:3.18-5.module+el8.10.0+22417+2fb00970
crun< 0:1.5-1.module+el8.6.0+22769+fa0fe772 | < 0:1.8.4-2.module+el8.8.0+22334+bb93e398 | < 0:1.14.3-2.module+el8.10.0+22417+2fb00970
crun-debuginfo< 0:1.5-1.module+el8.6.0+22769+fa0fe772 | < 0:1.8.4-2.module+el8.8.0+22334+bb93e398 | < 0:1.14.3-2.module+el8.10.0+22417+2fb00970
crun-debugsource< 0:1.5-1.module+el8.6.0+22769+fa0fe772 | < 0:1.8.4-2.module+el8.8.0+22334+bb93e398 | < 0:1.14.3-2.module+el8.10.0+22417+2fb00970
fuse-overlayfs< 0:1.9-1.module+el8.6.0+22769+fa0fe772 | < 0:1.11-1.module+el8.8.0+22334+bb93e398 | < 0:1.13-1.module+el8.10.0+22417+2fb00970
fuse-overlayfs-debuginfo< 0:1.9-1.module+el8.6.0+22769+fa0fe772 | < 0:1.11-1.module+el8.8.0+22334+bb93e398 | < 0:1.13-1.module+el8.10.0+22417+2fb00970
fuse-overlayfs-debugsource< 0:1.9-1.module+el8.6.0+22769+fa0fe772 | < 0:1.11-1.module+el8.8.0+22334+bb93e398 | < 0:1.13-1.module+el8.10.0+22417+2fb00970
libslirp< 0:4.4.0-1.module+el8.6.0+22769+fa0fe772 | < 0:4.4.0-1.module+el8.8.0+22334+bb93e398 | < 0:4.4.0-2.module+el8.10.0+22417+2fb00970
libslirp-debuginfo< 0:4.4.0-1.module+el8.6.0+22769+fa0fe772 | < 0:4.4.0-1.module+el8.8.0+22334+bb93e398 | < 0:4.4.0-2.module+el8.10.0+22417+2fb00970
libslirp-debugsource< 0:4.4.0-1.module+el8.6.0+22769+fa0fe772 | < 0:4.4.0-1.module+el8.8.0+22334+bb93e398 | < 0:4.4.0-2.module+el8.10.0+22417+2fb00970
libslirp-devel< 0:4.4.0-1.module+el8.6.0+22769+fa0fe772 | < 0:4.4.0-1.module+el8.8.0+22334+bb93e398 | < 0:4.4.0-2.module+el8.10.0+22417+2fb00970
netavark< 2:1.0.1-40.module+el8.6.0+22769+fa0fe772 | < 2:1.5.1-3.module+el8.8.0+22334+bb93e398 | < 2:1.10.3-1.module+el8.10.0+22417+2fb00970
oci-seccomp-bpf-hook< 0:1.2.6-1.module+el8.6.0+22769+fa0fe772 | < 0:1.2.8-1.module+el8.8.0+22334+bb93e398 | < 0:1.2.10-1.module+el8.10.0+22417+2fb00970
oci-seccomp-bpf-hook-debuginfo< 0:1.2.6-1.module+el8.6.0+22769+fa0fe772 | < 0:1.2.8-1.module+el8.8.0+22334+bb93e398 | < 0:1.2.10-1.module+el8.10.0+22417+2fb00970
oci-seccomp-bpf-hook-debugsource< 0:1.2.6-1.module+el8.6.0+22769+fa0fe772 | < 0:1.2.8-1.module+el8.8.0+22334+bb93e398 | < 0:1.2.10-1.module+el8.10.0+22417+2fb00970
podman< 5:5.2.2-2.rhaos4.17.el8 | < 5:5.2.2-2.rhaos4.17.el9 | < 4:5.2.2-13.el9_5 | < 2:4.2.0-6.el9_0 | < 4:4.9.4-17.el9_4 | < 2:4.2.0-7.module+el8.6.0+22769+fa0fe772 | < 3:4.4.1-26.module+el8.8.0+22779+ce927503 | < 2:4.4.1-22.el9_2 | < 4:4.9.4-19.module+el8.10.0+22744+7794713b | < 3:4.4.1-22.rhaos4.14.el8 | < 3:4.4.1-22.rhaos4.14.el9 | < 3:4.4.1-33.rhaos4.15.el8 | < 3:4.4.1-33.rhaos4.15.el9 | < 3:4.4.1-9.rhaos4.12.el8 | < 3:4.2.0-13.rhaos4.12.el9
podman-catatonit< 5:5.2.2-2.rhaos4.17.el8 | < 2:4.2.0-6.el9_0 | < 2:4.2.0-7.module+el8.6.0+22769+fa0fe772 | < 3:4.4.1-26.module+el8.8.0+22779+ce927503 | < 4:4.9.4-19.module+el8.10.0+22744+7794713b | < 3:4.4.1-22.rhaos4.14.el8 | < 3:4.4.1-33.rhaos4.15.el8 | < 3:4.4.1-9.rhaos4.12.el8 | < 3:4.2.0-13.rhaos4.12.el9
podman-catatonit-debuginfo< 5:5.2.2-2.rhaos4.17.el8 | < 2:4.2.0-6.el9_0 | < 2:4.2.0-7.module+el8.6.0+22769+fa0fe772 | < 3:4.4.1-26.module+el8.8.0+22779+ce927503 | < 4:4.9.4-19.module+el8.10.0+22744+7794713b | < 3:4.4.1-22.rhaos4.14.el8 | < 3:4.4.1-33.rhaos4.15.el8 | < 3:4.4.1-9.rhaos4.12.el8 | < 3:4.2.0-13.rhaos4.12.el9
podman-debuginfo< 5:5.2.2-2.rhaos4.17.el8 | < 5:5.2.2-2.rhaos4.17.el9 | < 4:5.2.2-13.el9_5 | < 2:4.2.0-6.el9_0 | < 4:4.9.4-17.el9_4 | < 2:4.2.0-7.module+el8.6.0+22769+fa0fe772 | < 3:4.4.1-26.module+el8.8.0+22779+ce927503 | < 2:4.4.1-22.el9_2 | < 4:4.9.4-19.module+el8.10.0+22744+7794713b | < 3:4.4.1-22.rhaos4.14.el8 | < 3:4.4.1-22.rhaos4.14.el9 | < 3:4.4.1-33.rhaos4.15.el8 | < 3:4.4.1-33.rhaos4.15.el9 | < 3:4.4.1-9.rhaos4.12.el8 | < 3:4.2.0-13.rhaos4.12.el9
podman-debugsource< 5:5.2.2-2.rhaos4.17.el8 | < 5:5.2.2-2.rhaos4.17.el9 | < 4:5.2.2-13.el9_5 | < 2:4.2.0-6.el9_0 | < 4:4.9.4-17.el9_4 | < 2:4.2.0-7.module+el8.6.0+22769+fa0fe772 | < 3:4.4.1-26.module+el8.8.0+22779+ce927503 | < 2:4.4.1-22.el9_2 | < 4:4.9.4-19.module+el8.10.0+22744+7794713b | < 3:4.4.1-22.rhaos4.14.el8 | < 3:4.4.1-22.rhaos4.14.el9 | < 3:4.4.1-33.rhaos4.15.el8 | < 3:4.4.1-33.rhaos4.15.el9 | < 3:4.4.1-9.rhaos4.12.el8 | < 3:4.2.0-13.rhaos4.12.el9
podman-docker< 5:5.2.2-2.rhaos4.17.el8 | < 5:5.2.2-2.rhaos4.17.el9 | < 4:5.2.2-13.el9_5 | < 2:4.2.0-6.el9_0 | < 4:4.9.4-17.el9_4 | < 2:4.2.0-7.module+el8.6.0+22769+fa0fe772 | < 3:4.4.1-26.module+el8.8.0+22779+ce927503 | < 2:4.4.1-22.el9_2 | < 4:4.9.4-19.module+el8.10.0+22744+7794713b | < 3:4.4.1-22.rhaos4.14.el8 | < 3:4.4.1-22.rhaos4.14.el9 | < 3:4.4.1-33.rhaos4.15.el8 | < 3:4.4.1-33.rhaos4.15.el9 | < 3:4.4.1-9.rhaos4.12.el8 | < 3:4.2.0-13.rhaos4.12.el9
podman-gvproxy< 5:5.2.2-2.rhaos4.17.el8 | < 2:4.2.0-6.el9_0 | < 2:4.2.0-7.module+el8.6.0+22769+fa0fe772 | < 3:4.4.1-26.module+el8.8.0+22779+ce927503 | < 2:4.4.1-22.el9_2 | < 4:4.9.4-19.module+el8.10.0+22744+7794713b | < 3:4.4.1-22.rhaos4.14.el8 | < 3:4.4.1-22.rhaos4.14.el9 | < 3:4.4.1-33.rhaos4.15.el8 | < 3:4.4.1-33.rhaos4.15.el9 | < 3:4.4.1-9.rhaos4.12.el8 | < 3:4.2.0-13.rhaos4.12.el9
podman-gvproxy-debuginfo< 5:5.2.2-2.rhaos4.17.el8 | < 2:4.2.0-6.el9_0 | < 2:4.2.0-7.module+el8.6.0+22769+fa0fe772 | < 3:4.4.1-26.module+el8.8.0+22779+ce927503 | < 2:4.4.1-22.el9_2 | < 4:4.9.4-19.module+el8.10.0+22744+7794713b | < 3:4.4.1-22.rhaos4.14.el8 | < 3:4.4.1-22.rhaos4.14.el9 | < 3:4.4.1-33.rhaos4.15.el8 | < 3:4.4.1-33.rhaos4.15.el9 | < 3:4.4.1-9.rhaos4.12.el8 | < 3:4.2.0-13.rhaos4.12.el9
podman-plugins< 5:5.2.2-2.rhaos4.17.el8 | < 5:5.2.2-2.rhaos4.17.el9 | < 4:5.2.2-13.el9_5 | < 2:4.2.0-6.el9_0 | < 4:4.9.4-17.el9_4 | < 2:4.2.0-7.module+el8.6.0+22769+fa0fe772 | < 3:4.4.1-26.module+el8.8.0+22779+ce927503 | < 2:4.4.1-22.el9_2 | < 4:4.9.4-19.module+el8.10.0+22744+7794713b | < 3:4.4.1-22.rhaos4.14.el8 | < 3:4.4.1-22.rhaos4.14.el9 | < 3:4.4.1-33.rhaos4.15.el8 | < 3:4.4.1-33.rhaos4.15.el9 | < 3:4.4.1-9.rhaos4.12.el8 | < 3:4.2.0-13.rhaos4.12.el9
podman-plugins-debuginfo< 5:5.2.2-2.rhaos4.17.el8 | < 5:5.2.2-2.rhaos4.17.el9 | < 4:5.2.2-13.el9_5 | < 2:4.2.0-6.el9_0 | < 4:4.9.4-17.el9_4 | < 2:4.2.0-7.module+el8.6.0+22769+fa0fe772 | < 3:4.4.1-26.module+el8.8.0+22779+ce927503 | < 2:4.4.1-22.el9_2 | < 4:4.9.4-19.module+el8.10.0+22744+7794713b | < 3:4.4.1-22.rhaos4.14.el8 | < 3:4.4.1-22.rhaos4.14.el9 | < 3:4.4.1-33.rhaos4.15.el8 | < 3:4.4.1-33.rhaos4.15.el9 | < 3:4.4.1-9.rhaos4.12.el8 | < 3:4.2.0-13.rhaos4.12.el9
podman-remote< 5:5.2.2-2.rhaos4.17.el8 | < 5:5.2.2-2.rhaos4.17.el9 | < 4:5.2.2-13.el9_5 | < 2:4.2.0-6.el9_0 | < 4:4.9.4-17.el9_4 | < 2:4.2.0-7.module+el8.6.0+22769+fa0fe772 | < 3:4.4.1-26.module+el8.8.0+22779+ce927503 | < 2:4.4.1-22.el9_2 | < 4:4.9.4-19.module+el8.10.0+22744+7794713b | < 3:4.4.1-22.rhaos4.14.el8 | < 3:4.4.1-22.rhaos4.14.el9 | < 3:4.4.1-33.rhaos4.15.el8 | < 3:4.4.1-33.rhaos4.15.el9 | < 3:4.4.1-9.rhaos4.12.el8 | < 3:4.2.0-13.rhaos4.12.el9
podman-remote-debuginfo< 5:5.2.2-2.rhaos4.17.el8 | < 5:5.2.2-2.rhaos4.17.el9 | < 4:5.2.2-13.el9_5 | < 2:4.2.0-6.el9_0 | < 4:4.9.4-17.el9_4 | < 2:4.2.0-7.module+el8.6.0+22769+fa0fe772 | < 3:4.4.1-26.module+el8.8.0+22779+ce927503 | < 2:4.4.1-22.el9_2 | < 4:4.9.4-19.module+el8.10.0+22744+7794713b | < 3:4.4.1-22.rhaos4.14.el8 | < 3:4.4.1-22.rhaos4.14.el9 | < 3:4.4.1-33.rhaos4.15.el8 | < 3:4.4.1-33.rhaos4.15.el9 | < 3:4.4.1-9.rhaos4.12.el8 | < 3:4.2.0-13.rhaos4.12.el9
podman-tests< 5:5.2.2-2.rhaos4.17.el8 | < 5:5.2.2-2.rhaos4.17.el9 | < 4:5.2.2-13.el9_5 | < 2:4.2.0-6.el9_0 | < 4:4.9.4-17.el9_4 | < 2:4.2.0-7.module+el8.6.0+22769+fa0fe772 | < 3:4.4.1-26.module+el8.8.0+22779+ce927503 | < 2:4.4.1-22.el9_2 | < 4:4.9.4-19.module+el8.10.0+22744+7794713b | < 3:4.4.1-22.rhaos4.14.el8 | < 3:4.4.1-22.rhaos4.14.el9 | < 3:4.4.1-33.rhaos4.15.el8 | < 3:4.4.1-33.rhaos4.15.el9 | < 3:4.4.1-9.rhaos4.12.el8 | < 3:4.2.0-13.rhaos4.12.el9
python-podman< 0:4.0.1-1.module+el8.6.0+22769+fa0fe772 | < 0:4.4.1-1.module+el8.8.0+22334+bb93e398 | < 0:4.9.0-3.module+el8.10.0+22417+2fb00970
python3-criu< 0:3.15-3.module+el8.6.0+22769+fa0fe772 | < 0:3.15-4.module+el8.8.0+22334+bb93e398 | < 0:3.18-5.module+el8.10.0+22417+2fb00970
python3-podman< 0:4.0.1-1.module+el8.6.0+22769+fa0fe772 | < 0:4.4.1-1.module+el8.8.0+22334+bb93e398 | < 0:4.9.0-3.module+el8.10.0+22417+2fb00970
runc< 1:1.1.12-1.module+el8.6.0+22769+fa0fe772 | < 1:1.1.12-1.module+el8.8.0+22334+bb93e398 | < 1:1.1.12-6.module+el8.10.0+22722+0028f543
runc-debuginfo< 1:1.1.12-1.module+el8.6.0+22769+fa0fe772 | < 1:1.1.12-1.module+el8.8.0+22334+bb93e398 | < 1:1.1.12-6.module+el8.10.0+22722+0028f543
runc-debugsource< 1:1.1.12-1.module+el8.6.0+22769+fa0fe772 | < 1:1.1.12-1.module+el8.8.0+22334+bb93e398 | < 1:1.1.12-6.module+el8.10.0+22722+0028f543
skopeo< 2:1.9.1-2.module+el8.6.0+22769+fa0fe772 | < 2:1.11.2-0.3.module+el8.8.0+22334+bb93e398 | < 2:1.14.5-3.module+el8.10.0+22417+2fb00970
skopeo-debuginfo< 2:1.9.1-2.module+el8.6.0+22769+fa0fe772
skopeo-debugsource< 2:1.9.1-2.module+el8.6.0+22769+fa0fe772
skopeo-tests< 2:1.9.1-2.module+el8.6.0+22769+fa0fe772 | < 2:1.11.2-0.3.module+el8.8.0+22334+bb93e398 | < 2:1.14.5-3.module+el8.10.0+22417+2fb00970
slirp4netns< 0:1.2.0-3.module+el8.6.0+22769+fa0fe772 | < 0:1.2.0-3.module+el8.8.0+22334+bb93e398 | < 0:1.2.3-1.module+el8.10.0+22417+2fb00970
slirp4netns-debuginfo< 0:1.2.0-3.module+el8.6.0+22769+fa0fe772 | < 0:1.2.0-3.module+el8.8.0+22334+bb93e398 | < 0:1.2.3-1.module+el8.10.0+22417+2fb00970
slirp4netns-debugsource< 0:1.2.0-3.module+el8.6.0+22769+fa0fe772 | < 0:1.2.0-3.module+el8.8.0+22334+bb93e398 | < 0:1.2.3-1.module+el8.10.0+22417+2fb00970
toolbox< 0:0.0.99.3-0.7.module+el8.6.0+22769+fa0fe772 | < 0:0.0.99.3-7.module+el8.8.0+22334+bb93e398 | < 0:0.0.99.5-2.module+el8.10.0+22417+2fb00970
toolbox-debuginfo< 0:0.0.99.3-0.7.module+el8.6.0+22769+fa0fe772 | < 0:0.0.99.3-7.module+el8.8.0+22334+bb93e398 | < 0:0.0.99.5-2.module+el8.10.0+22417+2fb00970
toolbox-debugsource< 0:0.0.99.3-0.7.module+el8.6.0+22769+fa0fe772 | < 0:0.0.99.3-7.module+el8.8.0+22334+bb93e398 | < 0:0.0.99.5-2.module+el8.10.0+22417+2fb00970
toolbox-tests< 0:0.0.99.3-0.7.module+el8.6.0+22769+fa0fe772 | < 0:0.0.99.3-7.module+el8.8.0+22334+bb93e398 | < 0:0.0.99.5-2.module+el8.10.0+22417+2fb00970
udica< 0:0.2.6-5.module+el8.6.0+22769+fa0fe772 | < 0:0.2.6-20.module+el8.8.0+22334+bb93e398 | < 0:0.2.6-21.module+el8.10.0+22417+2fb00970

Show all 67

Suse7 products

buildah&distro=SUSE Linux Enterprise Module for Containers 15 SP6< 1.35.5-150500.3.25.1
podman&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS< 4.9.5-150500.3.31.1
podman&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS< 4.9.5-150500.3.31.1
podman&distro=SUSE Linux Enterprise Micro 5.5< 4.9.5-150500.3.31.1
podman&distro=SUSE Linux Enterprise Module for Containers 15 SP6< 4.9.5-150500.3.31.1

Show all 7

Chainguard3 products

buildah< 1.39.0-r2
podman< 5.3.2-r0
prometheus-podman-exporter< 1.14.0-r3

Opensuse3 products

buildah&distro=openSUSE Leap 15.6< 1.35.5-150500.3.25.1
podman&distro=openSUSE Leap 15.6< 4.9.5-150500.3.31.1
podman&distro=openSUSE Tumbleweed< 5.3.2-1.1

Alpine2 products

buildah< 1.38.1-r0
podman< 5.3.2-r0

Wolfi2 products

buildah< 1.39.0-r2
podman< 5.3.2-r0

Debian1 product

golang-github-containers-buildahAll versions (No fix recorded) | < 1.38.1+ds1-1

Github.com/containers1 product

buildah≥ 1.37.0, < 1.37.6 | ≥ 1.35.0, < 1.35.5 | < 1.33.12 | ≥ 1.38.0, < 1.38.1

Ubuntu1 product

podmanAll versions (No fix recorded)

9 vendors · 87 products

References

71 links

access.redhat.com/errata/RHSA-2025:0830Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:0878Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:0922Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:0923Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:1186Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:1187Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:1188Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:1189Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:1207Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:1275Vendor AdvisoryX Refsource REDHATAdvisoryWEB

Show all 71 references

access.redhat.com/errata/RHSA-2025:1295Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:1296Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:1372Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:1453Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:1707Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:1713Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:1908Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:1910Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:1914Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:2441Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:2443Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:2454Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:2456Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:2701Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:2703Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:2710Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:2712Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:3577Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:3798Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/security/cve/CVE-2024-11218VDB EntryX Refsource REDHATREPORTAdvisoryWEB
bugzilla.redhat.com/show_bug.cgi?id=2326231Issue TrackingX Refsource REDHATREPORTWEB
github.com/containers/buildah/pull/5918ARTICLEFIXWEB
www.suse.com/support/update/announcement/2025/suse-su-20250301-1/Advisory
bugzilla.suse.com/1236272REPORT
www.suse.com/security/cve/CVE-2024-11218WEB
www.suse.com/support/update/announcement/2025/suse-su-20250382-1/Advisory
bugzilla.suse.com/1236270REPORT
access.redhat.com/security/updates/classification/ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0878.jsonAdvisory
www.cve.org/CVERecord?id=CVE-2024-11218AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2024-11218AdvisoryOval
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0922.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0923.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1186.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1187.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1188.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1189.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1207.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1275.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1295.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1296.jsonAdvisory
issues.redhat.com/browse/RHEL-74865ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1372.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1453.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1713.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1910.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1914.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_2443.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_2456.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_2712.jsonAdvisory
ubuntu.com/security/CVE-2024-11218REPORT
security-tracker.debian.org/tracker/CVE-2024-11218Advisory
access.redhat.com/downloads/content/package-browser/WEB
catalog.redhat.com/software/containers/WEB
github.com/CVEProject/cvelistV5/tree/main/cves/2024/11xxx/CVE-2024-11218.jsonAdvisory
github.com/containers/buildahPACKAGE
github.com/containers/buildah/security/advisories/GHSA-5vpc-35f4-r8w6WEBAdvisory
issues.redhat.com/browse/RHEL-67616WEB
issues.redhat.com/browse/RHEL-67618WEB
access.redhat.com/errata/RHEA-2024:6126Vendor AdvisoryX Refsource REDHAT
security.alpinelinux.org/vuln/CVE-2024-11218Advisory