Vulnerability in Red Hat Enterprise Linux 7
CVE-2024-1753
A flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers. A malicious Containerfile can use a dummy image with a symbolic link to the root filesystem as a mount source and cause the mount operation to mount the host root filesystem inside the RUN step. The commands inside the RUN step will then have read-write access to the host filesystem, allowing for full container escape at build time.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.6 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.005 (39.8th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 40th percentile — 39.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.005 · newest: 0.005 · change: 0.000
Affected products
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8 — versions 8090020240413110917.d7b6f4b7, 8090020240417184044.e7857ab1, 8100020240419145834.afee755d
- Red Hat Enterprise Linux 8.6 Extended Update Support — versions 8060020240422155330.3b538bd8, 8060020240419071711.2e213529
- Red Hat Enterprise Linux 8.8 Extended Update Support — versions 8080020240422101606.0f77c1b7
- Red Hat Enterprise Linux 9 — versions 1:1.31.5-1.el9_3, 4:4.9.4-3.el9_4
- Red Hat Enterprise Linux 9.0 Extended Update Support — versions 1:1.26.7-1.el9_0, 2:4.2.0-3.el9_0
- Red Hat Enterprise Linux 9.2 Extended Update Support — versions 1:1.29.3-1.el9_2, 2:4.4.1-16.el9_2
- Red Hat Openshift Container Platform 3.11
- Red Hat Openshift Container Platform 4.12 — versions 3:4.4.1-3.2.rhaos4.12.el8
- Red Hat Openshift Container Platform 4.13 — versions 3:4.4.1-6.3.rhaos4.13.el9, 3:4.4.1-8.3.rhaos4.13.el9
Weakness classification (CWE)
Public proof-of-concept exploits
References
- access.redhat.com/errata/RHSA-2024:2049 (vendor-advisory)
- access.redhat.com/errata/RHSA-2024:2055 (vendor-advisory)
- access.redhat.com/errata/RHSA-2024:2064 (vendor-advisory)
- access.redhat.com/errata/RHSA-2024:2066 (vendor-advisory)
- access.redhat.com/errata/RHSA-2024:2077 (vendor-advisory)
- access.redhat.com/errata/RHSA-2024:2084 (vendor-advisory)
- access.redhat.com/errata/RHSA-2024:2089 (vendor-advisory)
- access.redhat.com/errata/RHSA-2024:2090 (vendor-advisory)
- access.redhat.com/errata/RHSA-2024:2097 (vendor-advisory)
- access.redhat.com/errata/RHSA-2024:2098 (vendor-advisory)
Frequently asked questions
- What is CVE-2024-1753?
- CVE-2024-1753 is a high-severity vulnerability in Red Hat Enterprise Linux 7, classified under Improper Link Resolution Before File Access. CVSS score: 8.6/10. Published 2024-03-18.
- How severe is CVE-2024-1753?
- High severity. CVSS v3 base score is 8.6 out of 10.
- Is CVE-2024-1753 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.