REDHAT-BUG-2315887
First published: Tue Oct 01 2024(Updated: )
A flaw in the bind-propagation option of the Dockerfile RUN --mount instruction allows arbitrary parameters to be passed to the underlying mount command. This issue enables an attacker to mount arbitrary host files into a container during the build process and potentially modify them. SELinux does not provide sufficient defense, as the attacker can specify :z or :Z to relabel the host directory for container access. The vulnerability requires an attacker to have build privileges on the system and can lead to unauthorized access and modification of host files, posing significant security risks.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Docker |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/errata/RHSA-2024:8846
- https://access.redhat.com/errata/RHSA-2024:9051
- https://access.redhat.com/errata/RHSA-2024:9454
- https://access.redhat.com/errata/RHSA-2024:9459
- https://access.redhat.com/errata/RHSA-2024:9926
- https://access.redhat.com/errata/RHSA-2024:10147
- https://bugzilla.redhat.com/show_bug.cgi?id=2315887
Frequently Asked Questions
What is the severity of REDHAT-BUG-2315887?
The severity of REDHAT-BUG-2315887 is considered high due to its potential to allow unauthorized access to host files.
How do I fix REDHAT-BUG-2315887?
To fix REDHAT-BUG-2315887, update your Docker installation to the latest version that addresses this vulnerability.
What systems are affected by REDHAT-BUG-2315887?
REDHAT-BUG-2315887 affects versions of Docker where the bind-propagation option of the RUN --mount instruction is utilized.
What can attackers do with REDHAT-BUG-2315887?
Attackers can exploit REDHAT-BUG-2315887 to mount arbitrary host files into containers during the build process.
Is SELinux impacted by REDHAT-BUG-2315887?
SELinux protections may not be effective against the misuse of the bind-propagation option exploited in REDHAT-BUG-2315887.
- agent/severity
- agent/description
- agent/type
- agent/event
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2024-9407
- agent/last-modified-date
- agent/references
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/docker
- canonical/docker