Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

CVE-2024-9676

medium

A vulnerability was found in Podman, Buildah, and CRI-O.

Vendor / product: Redhat — openshift container platform

A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to hang and result in a denial of service via OOM kill when running a malicious image using an automatically assigned user namespace (`--userns=auto` in Podman and Buildah). The containers/storage library will read /etc/passwd inside the container, but does not properly validate if that file is a symlink, which can be used to cause the library to read an arbitrary file on the host.

CVSS
6.5
6.5 (CVSS v3.1)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Severity source: NVD CVSS v3.1 (nvd@nist.gov)
Timeline (UTC)
Published: 2024-10-15 16:15
Modified: 2026-10-30 19:17
NVD status: Modified
Last synced 3 days ago
Verified against the source API 2026-10-30 19:20 UTC
Exploitation
Not listed in CISA KEV (as of last catalog sync)
Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).

Affected products

redhat / openshift_container_platform 4.12, 4.13, 4.14, 4.15, 4.16, 4.17
redhat / openshift_container_platform_for_arm64 4.12, 4.13, 4.14, 4.15, 4.16
redhat / openshift_container_platform_for_ibm_z 4.12, 4.13, 4.14, 4.15, 4.16
redhat / openshift_container_platform_for_linuxone 4.12, 4.13, 4.14, 4.15, 4.16
redhat / openshift_container_platform_for_power 4.12, 4.13, 4.14, 4.15, 4.16
redhat / enterprise_linux 9.0
redhat / enterprise_linux_eus 9.4
redhat / enterprise_linux_for_arm_64 9.0_aarch64
redhat / enterprise_linux_for_arm_64_eus 9.4_aarch64
redhat / enterprise_linux_for_ibm_z_systems 9.0_s390x
redhat / enterprise_linux_for_ibm_z_systems_eus 9.4_s390x
redhat / enterprise_linux_for_power_little_endian 9.0_ppc64le
redhat / enterprise_linux_for_power_little_endian_eus 9.4_ppc64le
redhat / enterprise_linux_server_aus 9.4
redhat / enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions 9.4_ppc64le

Weakness classification (CWE)

CWE-22

Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.

Mitigation & advisories

Vendor advisory: https://access.redhat.com/errata/RHSA-2024:8418
Vendor advisory: https://access.redhat.com/errata/RHSA-2024:8428
Vendor advisory: https://access.redhat.com/errata/RHSA-2024:8437
Vendor advisory: https://access.redhat.com/errata/RHSA-2024:8686
Vendor advisory: https://access.redhat.com/errata/RHSA-2024:8690
Vendor advisory: https://access.redhat.com/errata/RHSA-2024:8694
Vendor advisory: https://access.redhat.com/errata/RHSA-2024:8700
Vendor advisory: https://access.redhat.com/errata/RHSA-2024:8984
Vendor advisory: https://access.redhat.com/errata/RHSA-2024:9051
Vendor advisory: https://access.redhat.com/errata/RHSA-2024:9454

References

Data sources

NVD CVE API 2.0 — fetched 2026-10-30 19:20 UTC · record ↗

Learn the basics

Understanding CVEs and CVSS Scores

Related CVEs

CVE-2022-2905CVE-2022-2625CVE-2022-1354CVE-2022-0171CVE-2021-4217