{"id":"CVE-2024-11218","title":"A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile","summary":"A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it …","severity":"high","cvss":8.6,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-269"],"published":"2025-01-22","updated":"2026-06-25","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-11218","references":[{"url":"https://access.redhat.com/errata/RHSA-2025:0830","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:0878","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:0922","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:0923","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:1186","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:1187","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:1188","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:1189","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:1207","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:1275","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:1295","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:1296","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:1372","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:1453","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:1707","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:1713","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:1908","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:1910","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:1914","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:2441","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:2443","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:2454","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:2456","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:2701","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:2703","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:2710","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:2712","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:3577","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:3798","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/security/cve/CVE-2024-11218","label":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2326231","label":"secalert@redhat.com"},{"url":"https://github.com/containers/buildah/pull/5918","label":"secalert@redhat.com"},{"url":"https://github.com/containers/buildah/security/advisories/GHSA-5vpc-35f4-r8w6"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-11218"},{"url":"https://github.com/containers/buildah"},{"url":"https://issues.redhat.com/browse/RHEL-67616"},{"url":"https://issues.redhat.com/browse/RHEL-67618"}],"tags":["nvd","osv","go"],"epss":0.00365,"epssPercentile":0.30345,"ingestedAt":"2026-06-29T13:24:34.151Z","aliases":["GHSA-5vpc-35f4-r8w6","GO-2025-3414"],"ecosystem":"go","vendor":"containers","product":"github.com/containers/buildah","affected":["github.com/containers/buildah >= 1.38.0, < 1.38.1","github.com/containers/buildah >= 1.37.0, < 1.37.6","github.com/containers/buildah >= 1.35.0, < 1.35.5","github.com/containers/buildah < 1.33.12"],"patched":["github.com/containers/buildah 1.38.1","github.com/containers/buildah 1.37.6","github.com/containers/buildah 1.35.5","github.com/containers/buildah 1.33.12"],"slug":"CVE-2024-11218","body":"## Overview\n\nA vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and directories on the host.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Package advisory (CVE-2024-11218)\n\nAffected packages:\n\n- `github.com/containers/buildah >= 1.38.0, < 1.38.1`\n- `github.com/containers/buildah >= 1.37.0, < 1.37.6`\n- `github.com/containers/buildah >= 1.35.0, < 1.35.5`\n- `github.com/containers/buildah < 1.33.12`\n\nPatched in:\n\n- `github.com/containers/buildah 1.38.1`\n- `github.com/containers/buildah 1.37.6`\n- `github.com/containers/buildah 1.35.5`\n- `github.com/containers/buildah 1.33.12`\n\nSource: https://osv.dev/vulnerability/GHSA-5vpc-35f4-r8w6","depth":"twilight","depthScore":47,"depthScoreParts":{"impact":47.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}