What is the CVSS score of CVE-2024-9675?

CVE-2024-9675 has a CVSS 3.1 base score of 4.4 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N. EPSS exploitation probability: 0.1%.

Which versions of Buildah are affected by CVE-2024-9675?

Alpine Linux: buildah fixed in 1.37.5-r0. A patch is available.

Is there a patch available for CVE-2024-9675?

Yes, a patch is available for CVE-2024-9675. Update the affected software to the latest version immediately.

Buildah CVE-2024-9675

MEDIUM

Path Traversal (CWE-22)

N/A vendor:alpine

Path Traversal Buildah Openshift Container Platform Enterprise Linux Enterprise Linux Eus Enterprise Linux For Arm 64 Enterprise Linux For Arm 64 Eus Enterprise Linux For Ibm Z Systems Enterprise Linux For Ibm Z Systems Eus Enterprise Linux For Power Little Endian Enterprise Linux For Power Little Endian Eus Enterprise Linux Server Aus Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions Enterprise Linux Server Tus Enterprise Linux Update Services For Sap Solutions

4.4

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

4.4 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

CVSS changed

Jun 25, 2026 - 03:22 NVD

4.4 (MEDIUM)

CVE Published

May 27, 2026 - 22:57 nvd

MEDIUM

DescriptionNVD

Alpine Linux: buildah fixed in 1.37.5-r0

Analysis

Alpine Linux: buildah fixed in 1.37.5-r0

More in Buildah

View all

CVE-2020-10696 HIGH This Week POC

8.8 Mar 31

A path traversal flaw was found in Buildah in versions before 1.14.5. Rated high severity (CVSS 8.8), this vulnerability

CVE-2022-2990 HIGH This Week POC

7.1 Sep 13

An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive informatio

CVE-2022-27651 MEDIUM This Month

6.8 Apr 04

A flaw was found in buildah where containers were incorrectly started with non-empty default permissions. Rated medium s

CVE-2019-10214 MEDIUM This Month

5.9 Nov 25

The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version

Same weakness CWE-22 – Path Traversal

View all

CVE-2019-3396 CRITICAL POC

9.8

CVE-2019-19781 CRITICAL POC

9.8

CVE-2020-5902 CRITICAL POC

9.8

CVE-2021-40444 HIGH POC

8.8

CVE-2021-27065 HIGH POC

7.8

CVE-2019-11510 CRITICAL POC

10.0

CVE-2018-13379 CRITICAL POC

9.1

CVE-2015-0016 HIGH POC

7.8

Same technique Path Traversal

View all

CVE-2025-64446 CRITICAL POC

9.8

CVE-2015-0016 HIGH POC

7.8

CVE-2016-0752 HIGH POC

7.5

CVE-2024-13159 CRITICAL POC

9.8

CVE-2024-13160 CRITICAL POC

9.8

CVE-2024-13161 CRITICAL POC

9.8

CVE-2014-0780 CRITICAL POC

9.8

CVE-2024-48248 HIGH POC

8.6

CVE-2024-9675 vulnerability details – vuln.today

Back

Buildah CVE-2024-9675

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

Analysis

More in Buildah

Same weakness CWE-22 – Path Traversal

Same technique Path Traversal

Share

External POC / Exploit Code