CVE-2024-1753

一、漏洞信息
 漏洞编号：[CVE-2024-1753](https://nvd.nist.gov/vuln/detail/CVE-2024-1753)
 漏洞归属组件：[buildah](https://gitee.com/src-openeuler/buildah)
 漏洞归属的版本：1.26.1,1.34.1
 CVSS V3.0分值：
  BaseScore：8.6 High
  Vector：CVSS：3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
 漏洞简述：
  A flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers. A malicious Containerfile can use a dummy image with a symbolic link to the root filesystem as a mount source and cause the mount operation to mount the host root filesystem inside the RUN step. The commands inside the RUN step will then have read-write access to the host filesystem, allowing for full container escape at build time.
 漏洞公开时间：2024-03-18 23:15:41
 漏洞创建时间：2024-03-18 17:23:59
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2024-1753
<details>
<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
| secalert.redhat.com | https://access.redhat.com/errata/RHSA-2024:2049 |  |
| secalert.redhat.com | https://access.redhat.com/errata/RHSA-2024:2055 |  |
| secalert.redhat.com | https://access.redhat.com/errata/RHSA-2024:2064 |  |
| secalert.redhat.com | https://access.redhat.com/errata/RHSA-2024:2066 |  |
| secalert.redhat.com | https://access.redhat.com/errata/RHSA-2024:2077 |  |
| secalert.redhat.com | https://access.redhat.com/errata/RHSA-2024:2084 |  |
| secalert.redhat.com | https://access.redhat.com/errata/RHSA-2024:2089 |  |
| secalert.redhat.com | https://access.redhat.com/errata/RHSA-2024:2090 |  |
| secalert.redhat.com | https://access.redhat.com/errata/RHSA-2024:2097 |  |
| secalert.redhat.com | https://access.redhat.com/errata/RHSA-2024:2098 |  |
| secalert.redhat.com | https://access.redhat.com/errata/RHSA-2024:2548 |  |
| secalert.redhat.com | https://access.redhat.com/errata/RHSA-2024:2645 |  |
| secalert.redhat.com | https://access.redhat.com/errata/RHSA-2024:2669 |  |
| secalert.redhat.com | https://access.redhat.com/errata/RHSA-2024:2672 |  |
| secalert.redhat.com | https://access.redhat.com/errata/RHSA-2024:2784 |  |
| secalert.redhat.com | https://access.redhat.com/errata/RHSA-2024:2877 |  |
| secalert.redhat.com | https://access.redhat.com/errata/RHSA-2024:3254 |  |
| secalert.redhat.com | https://access.redhat.com/security/cve/CVE-2024-1753 |  |
| secalert.redhat.com | https://bugzilla.redhat.com/show_bug.cgi?id=2265513 |  |
| secalert.redhat.com | https://github.com/containers/buildah/security/advisories/GHSA-pmf3-c36m-g5cf |  |
| secalert.redhat.com | https://github.com/containers/podman/security/advisories/GHSA-874v-pj72-92f3 |  |
| secalert.redhat.com | https://pkg.go.dev/vuln/GO-2024-2658 |  |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2024:2049 |  |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2024:2055 |  |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2024:2064 |  |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2024:2066 |  |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2024:2077 |  |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2024:2084 |  |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2024:2089 |  |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2024:2090 |  |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2024:2097 |  |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2024:2098 |  |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2024:2548 |  |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2024:2645 |  |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2024:2669 |  |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2024:2672 |  |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2024:2784 |  |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2024:2877 |  |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2024:3254 |  |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/security/cve/CVE-2024-1753 |  |
| af854a3a-2127-422b-91ae-364da2661108 | https://bugzilla.redhat.com/show_bug.cgi?id=2265513 |  |
| af854a3a-2127-422b-91ae-364da2661108 | https://github.com/containers/buildah/security/advisories/GHSA-pmf3-c36m-g5cf |  |
| af854a3a-2127-422b-91ae-364da2661108 | https://github.com/containers/podman/security/advisories/GHSA-874v-pj72-92f3 |  |
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FCRZVUDOFM5CPREQKBEU2VK2QK62PSBP/ |  |
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KOYMVMQ7RWMDTSKQTBO734BE3WQPI2AJ/ |  |
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZVBSVZGVABPYIHK5HZM472NPGWMI7WXH/ |  |
| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-1753 | https://bugzilla.suse.com/show_bug.cgi?id=1221677 |
| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2024-1753 | https://bugzilla.suse.com/show_bug.cgi?id=1221677 |
| suse_bugzilla | https://access.redhat.com/security/cve/CVE-2024-1753 | https://bugzilla.suse.com/show_bug.cgi?id=1221677 |
| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2265513 | https://bugzilla.suse.com/show_bug.cgi?id=1221677 |
| suse_bugzilla | https://github.com/containers/buildah/security/advisories/GHSA-pmf3-c36m-g5cf | https://bugzilla.suse.com/show_bug.cgi?id=1221677 |
| suse_bugzilla | https://github.com/containers/podman/security/advisories/GHSA-874v-pj72-92f3 | https://bugzilla.suse.com/show_bug.cgi?id=1221677 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:2055 | https://bugzilla.redhat.com/show_bug.cgi?id=2265513 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:2064 | https://bugzilla.redhat.com/show_bug.cgi?id=2265513 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:2066 | https://bugzilla.redhat.com/show_bug.cgi?id=2265513 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:2077 | https://bugzilla.redhat.com/show_bug.cgi?id=2265513 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:2084 | https://bugzilla.redhat.com/show_bug.cgi?id=2265513 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:2089 | https://bugzilla.redhat.com/show_bug.cgi?id=2265513 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:2098 | https://bugzilla.redhat.com/show_bug.cgi?id=2265513 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:2645 | https://bugzilla.redhat.com/show_bug.cgi?id=2265513 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:2049 | https://bugzilla.redhat.com/show_bug.cgi?id=2265513 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:2669 | https://bugzilla.redhat.com/show_bug.cgi?id=2265513 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:2672 | https://bugzilla.redhat.com/show_bug.cgi?id=2265513 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:2784 | https://bugzilla.redhat.com/show_bug.cgi?id=2265513 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:3254 | https://bugzilla.redhat.com/show_bug.cgi?id=2265513 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:2877 | https://bugzilla.redhat.com/show_bug.cgi?id=2265513 |
| ubuntu | https://github.com/containers/buildah/security/advisories/GHSA-pmf3-c36m-g5cf | https://ubuntu.com/security/CVE-2024-1753 |
| ubuntu | https://access.redhat.com/security/cve/CVE-2024-1753 | https://ubuntu.com/security/CVE-2024-1753 |
| ubuntu | https://bugzilla.redhat.com/show_bug.cgi?id=2265513 | https://ubuntu.com/security/CVE-2024-1753 |
| ubuntu | https://github.com/containers/podman/security/advisories/GHSA-874v-pj72-92f3 | https://ubuntu.com/security/CVE-2024-1753 |
| ubuntu | https://www.cve.org/CVERecord?id=CVE-2024-1753 | https://ubuntu.com/security/CVE-2024-1753 |
| ubuntu | https://nvd.nist.gov/vuln/detail/CVE-2024-1753 | https://ubuntu.com/security/CVE-2024-1753 |
| ubuntu | https://launchpad.net/bugs/cve/CVE-2024-1753 | https://ubuntu.com/security/CVE-2024-1753 |
| ubuntu | https://security-tracker.debian.org/tracker/CVE-2024-1753 | https://ubuntu.com/security/CVE-2024-1753 |
| debian |  | https://security-tracker.debian.org/tracker/CVE-2024-1753 |
| gentoo |  | https://security.gentoo.org/glsa/202407-12 |
| anolis |  | https://anas.openanolis.cn/cves/detail/CVE-2024-1753 |
| cve_search |  | https://access.redhat.com/security/cve/CVE-2024-1753 |
| cve_search |  | https://bugzilla.redhat.com/show_bug.cgi?id=2265513 |
| cve_search |  | https://github.com/containers/buildah/security/advisories/GHSA-pmf3-c36m-g5cf |
| cve_search |  | https://github.com/containers/podman/security/advisories/GHSA-874v-pj72-92f3 |
| cve_search |  | https://access.redhat.com/errata/RHSA-2024:2055 |
| cve_search |  | https://access.redhat.com/errata/RHSA-2024:2064 |
| cve_search |  | https://access.redhat.com/errata/RHSA-2024:2066 |
| cve_search |  | https://access.redhat.com/errata/RHSA-2024:2077 |
| cve_search |  | https://access.redhat.com/errata/RHSA-2024:2097 |
| cve_search |  | https://access.redhat.com/errata/RHSA-2024:2098 |
| cve_search |  | https://access.redhat.com/errata/RHSA-2024:2084 |
| cve_search |  | https://access.redhat.com/errata/RHSA-2024:2548 |
| cve_search |  | https://access.redhat.com/errata/RHSA-2024:2089 |
| cve_search |  | https://access.redhat.com/errata/RHSA-2024:2090 |
| cve_search |  | https://access.redhat.com/errata/RHSA-2024:2645 |
| cve_search |  | https://access.redhat.com/errata/RHSA-2024:2049 |
| cve_search |  | https://access.redhat.com/errata/RHSA-2024:2669 |
| cve_search |  | https://access.redhat.com/errata/RHSA-2024:2672 |
| cve_search |  | https://access.redhat.com/errata/RHSA-2024:2784 |
| cve_search |  | https://access.redhat.com/errata/RHSA-2024:3254 |
| cve_search |  | https://access.redhat.com/errata/RHSA-2024:2877 |
| github_advisory | https://bugzilla.redhat.com/show_bug.cgi?id=2265513 | https://github.com/advisories/GHSA-874v-pj72-92f3 |
| github_advisory | https://nvd.nist.gov/vuln/detail/CVE-2024-1753 | https://github.com/advisories/GHSA-874v-pj72-92f3 |

</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  openBrain开源漏洞感知系统
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源  |
| ------- | -------- | ------- | -------- | --------- |
|  |  | https://github.com/containers/buildah/commit/9de9c20ff368beb84b84fe660773d352519dc1c5 |  | go |
|  |  | https://github.com/containers/buildah/commit/a10eed09c6392c9fc66288e5759dbd601cbc3966 |  | snyk |

</details>

二、漏洞分析结构反馈
 影响性分析说明：
  在 Buildah（以及随后的 Podman Build）中发现了一个漏洞，该漏洞允许容器将主机文件系统上的任意位置挂载到构建容器中。恶意 Containerfile 可以使用带有指向根文件系统的符号链接的虚假映像作为挂载源，并导致挂载操作在 RUN 步骤内挂载主机根文件系统。这样，RUN 步骤内的命令就可以对主机文件系统进行读写访问，从而在构建时逃逸整个容器。
 openEuler评分：
  8.6
 Vector：CVSS：3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
 受影响版本排查(受影响/不受影响)：
  1.master(1.34.1):受影响
2.openEuler-22.03-LTS(1.26.1):受影响
3.openEuler-22.03-LTS-Next(1.26.1):受影响
4.openEuler-22.03-LTS-SP3(1.26.1):受影响
5.openEuler-24.03-LTS(1.34.1):受影响
6.openEuler-24.03-LTS-Next(1.34.1):受影响
7.openEuler-22.03-LTS-SP1:受影响
8.openEuler-22.03-LTS-SP2:受影响
9.openEuler-22.03-LTS-SP4(1.26.1):受影响
10.openEuler-24.03-LTS-SP1(1.34.1):受影响
11.openEuler-20.03-LTS-SP1:不受影响
12.openEuler-20.03-LTS-SP4:不受影响

修复是否涉及abi变化(是/否)：
  1.master(1.34.1):否
2.openEuler-20.03-LTS-SP1:否
3.openEuler-20.03-LTS-SP4:否
4.openEuler-22.03-LTS(1.26.1):否
5.openEuler-22.03-LTS-Next(1.26.1):否
6.openEuler-22.03-LTS-SP1:否
7.openEuler-22.03-LTS-SP2:否
8.openEuler-22.03-LTS-SP3(1.26.1):否
9.openEuler-24.03-LTS(1.34.1):否
10.openEuler-24.03-LTS-Next(1.34.1):否
11.openEuler-22.03-LTS-SP4(1.26.1):否
12.openEuler-24.03-LTS-SP1(1.34.1):否

原因说明：
  1.master(1.34.1):
2.openEuler-20.03-LTS-SP4:
3.openEuler-22.03-LTS-SP3(1.26.1):
4.openEuler-22.03-LTS-SP4(1.26.1):
5.openEuler-24.03-LTS(1.34.1):
6.openEuler-24.03-LTS-Next(1.34.1):
7.openEuler-24.03-LTS-SP1(1.34.1):

三、漏洞修复
安全公告链接：https://www.openeuler.org/zh/security/safety-bulletin/detail/?id=openEuler-SA-2025-1059

src-openEuler/buildah

内容风险标识

评论 (14)

src-openEuler/buildah .gitee-modal { width: 500px !important; }

内容风险标识

CVE-2024-1753

评论 (14)

搜索帮助

src-openEuler/buildah