Known vulnerabilities in buildah
Vendor:
openEuler
Software:
buildah
Software CPE:
cpe:2.3:o:openeuler:buildah:*:*:*:*:*:openeuler:*:*
Website:
https://www.openeuler.org/
Total vulnerabilities:
24
Public exploits:
3
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (24)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU125945 - Improper input validation CVE-2026-34986 |
CWE-20 | Medium | 1.26.1-13, 1.34.1-15 | 14.04.2026 |
SB2026041463 SB2026041464 SB2026041465 and 74 more |
||
| #VU123981 - Resource exhaustion CVE-2025-58181 |
CWE-400 | Medium | 1.26.1-13, 1.34.1-15 | 13.03.2026 |
SB2025122903 SB2026031315 SB2026031321 and 21 more |
||
| #VU120612 - Out-of-bounds read CVE-2025-47914 |
CWE-125 | Medium | 1.26.1-13, 1.34.1-15 | 29.12.2025 |
SB2025122903 SB2025122904 SB2025123103 and 19 more |
||
| #VU118717 - Improper input validation CVE-2025-47913 |
CWE-20 | Low | 1.34.1-12 | 24.11.2025 |
SB2025112448 SB2025112455 SB2025112456 and 53 more |
||
| #VU105459 - Resource exhaustion CVE-2025-22869 |
CWE-400 | Low | 1.26.1-7, 1.34.1-7 | 10.03.2025 |
SB2025031011 SB2025031015 SB2025032557 and 108 more |
||
| #VU105450 - Resource exhaustion CVE-2025-27144 |
CWE-400 | Medium | 1.26.1-7, 1.34.1-7, 1.34.1-10 | 07.03.2025 |
SB2025030735 SB2025030736 SB2025030737 and 80 more |
||
| #VU103500 - Permissions, Privileges, and Access Controls CVE-2024-11218 |
CWE-264 | Medium | 1.26.1-7 | 03.02.2025 |
SB2025020321 SB2025020332 SB2025020333 and 34 more |
||
| #VU101777 - Improper Authorization CVE-2024-45337 |
CWE-285 | Medium | 1.26.1-7, 1.34.1-10 | 13.12.2024 |
SB2024121332 SB2024121333 SB2024121334 and 93 more |
||
| #VU98817 - UNIX Symbolic Link (Symlink) Following CVE-2024-9676 |
CWE-61 | Low | 1.26.1-13, 1.34.1-15 | 18.10.2024 |
SB2024101822 SB2024101823 SB2024101824 and 54 more |
||
| #VU98141 - Improper input validation CVE-2024-9341 |
CWE-20 | Low | 1.26.1-7, 1.34.1-10 | 08.10.2024 |
SB2024100842 SB2024100843 SB2024100848 and 44 more |
||
| #VU98140 - Improper input validation CVE-2024-9407 |
CWE-20 | Low | 1.26.1-7, 1.34.1-10 | 08.10.2024 |
SB2024100842 SB2024100843 SB2024100848 and 24 more |
||
| #VU93850 - Resource exhaustion CVE-2024-24791 |
CWE-400 | Medium | 1.26.1-4, 1.34.1-5 | 07.07.2024 |
SB2024070727 SB2024070728 SB2024070729 and 86 more |
||
| #VU84537 - Inadequate Encryption Strength CVE-2023-48795 |
CWE-326 | Low | 1.26.1-4 | 19.12.2023 |
SB2023121903 SB2023121905 SB2023121906 and 343 more |
||
| #VU82064 - Resource exhaustion CVE-2023-39325 |
CWE-400 | Medium | 1.26.1-4 | 16.10.2023 |
SB2023101651 SB2023101652 SB2023101653 and 341 more |
||
| #VU74574 - Improper Control of Generation of Code ('Code Injection') CVE-2023-24538 |
CWE-94 | High | 1.26.1-4 | 06.04.2023 |
SB2023040668 SB2023040678 SB2023040679 and 85 more |
||
| #VU74573 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2023-24537 |
CWE-835 | Medium | 1.26.1-4 | 06.04.2023 |
SB2023040668 SB2023040678 SB2023040679 and 87 more |
||
| #VU74572 - Resource Management Errors CVE-2023-24536 |
CWE-399 | Medium | 1.26.1-4 | 06.04.2023 |
SB2023040668 SB2023040678 SB2023040679 and 80 more |
||
| #VU74571 - Resource exhaustion CVE-2023-24534 |
CWE-400 | Medium | 1.26.1-4 | 06.04.2023 |
SB2023040668 SB2023040678 SB2023040679 and 85 more |
||
| #VU72686 - Resource exhaustion CVE-2022-41723 |
CWE-400 | Medium | 1.26.1-4 | 01.03.2023 |
SB2023030130 SB2023030131 SB2023030946 and 190 more |
||
| #VU68390 - Resource exhaustion CVE-2022-41715 |
CWE-400 | Medium | 1.26.1-4 | 18.10.2022 |
SB2022101833 SB2022101834 SB2022102005 and 113 more |
Showing elements 1 - 20 out of 24