golang-github-containers-buildah vulnerabilities (Ubuntu)
11 vulnerabilities.
-
golang-github-containers-buildahUbuntu Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers 4.5 Medium -
golang-github-containers-buildahUbuntu Buildah: Build breakout using malicious Containerfile and Git Smart HTTP server or GitHub release tar archive 6.3 Medium -
golang-github-containers-buildahUbuntu Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos) 6.5 Medium -
golang-github-containers-buildahUbuntu Buildah: buildah allows arbitrary directory mount 7.8 High -
golang-github-containers-buildahUbuntu Buildah: podman: improper input validation in bind-propagation option of dockerfile run --mount instruction 4.7 Medium -
golang-github-containers-buildahUbuntu Buildah: buildah: container escape via improper bind mount validation 8.6 High -
golang-github-containers-buildahUbuntu Buildah (as part of Podman) vulnerable to Path Traversal 3.3 Low -
golang-github-containers-buildahUbuntu Buildah (as part of Podman) vulnerable to Link Following 5.3 Medium -
golang-github-containers-buildahUbuntu Buildah's incorrect handling of the supplementary groups may lead to data disclosure, modification 7.1 High -
golang-github-containers-buildahUbuntu Non-empty default inheritable capabilities for linux container in Buildah 6.8 Medium -
golang-github-containers-buildahUbuntu Buildah processes using chroot isolation may leak environment values to intermediate processes 5.5 Medium