Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16 packages



Risk Medium
Patch available YES
Number of vulnerabilities 3
CVE-ID CVE-2024-11218
CVE-2024-56201
CVE-2024-56326
CWE-ID CWE-264
CWE-254
Exploitation vector Network
Public exploit N/A
Vulnerable software
podman (Red Hat package)
Operating systems & Components / Operating system package or component

crun (Red Hat package)
Operating systems & Components / Operating system package or component

cri-o (Red Hat package)
Operating systems & Components / Operating system package or component

Red Hat OpenShift Container Platform
Client/Desktop applications / Software for system administration

Vendor Red Hat Inc.

Security Bulletin

This security bulletin contains information about 3 vulnerabilities.

1) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU103500

Risk: Medium

CVSSv4.0: 2.4 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:U/U:Green]

CVE-ID: CVE-2024-11218

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a remote user to escalate privileges on the system.

The vulnerability exists due to improperly imposed security restrictions during the build process. A remote user can leverage usage of a --mount flag in RUN instructions in Containerfiles along with multi-stage builds with use of concurrently-executing build stages or multiple separate but concurrently-executing builds to expose content from the build host and perform read/write operations on the system with privileges of the podman system service.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

podman (Red Hat package): before 4.9.4-13.rhaos4.16.el8

crun (Red Hat package): before 1.17-2.rhaos4.16.el8

cri-o (Red Hat package): before 1.29.12-4.rhaos4.16.gitadc9401.el8

Red Hat OpenShift Container Platform: before 4.16.33

CPE2.3 External links

https://access.redhat.com/errata/RHSA-2025:0830


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Security features bypass

EUVDB-ID: #VU101971

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56201

CWE-ID: CWE-254 - Security Features

Exploit availability: No

Description

The vulnerability allows a local user to bypass sandbox restrictions.

The vulnerability exists due to improper validation of user-supplied input.  A local user with the ability to control both the filename and the contents of a template can bypass sandbox restrictions.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

podman (Red Hat package): before 4.9.4-13.rhaos4.16.el8

crun (Red Hat package): before 1.17-2.rhaos4.16.el8

cri-o (Red Hat package): before 1.29.12-4.rhaos4.16.gitadc9401.el8

Red Hat OpenShift Container Platform: before 4.16.33

CPE2.3 External links

https://access.redhat.com/errata/RHSA-2025:0830


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Security features bypass

EUVDB-ID: #VU101972

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56326

CWE-ID: CWE-254 - Security Features

Exploit availability: No

Description

The vulnerability allows a local user to bypass sandbox restrictions.

The vulnerability exists in the way the Jinja sandboxed environment detects calls to str.format.  A local user with the ability to control the contents of a template can bypass sandbox restrictions.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

podman (Red Hat package): before 4.9.4-13.rhaos4.16.el8

crun (Red Hat package): before 1.17-2.rhaos4.16.el8

cri-o (Red Hat package): before 1.29.12-4.rhaos4.16.gitadc9401.el8

Red Hat OpenShift Container Platform: before 4.16.33

CPE2.3 External links

https://access.redhat.com/errata/RHSA-2025:0830


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###