Lucene search
PRIOn knowledge basePRION:CVE-2020-10696HistoryMar 31, 2020 - 10:15 p.m.
Path traversal
2020-03-3122:15:00
PRIOn knowledge base
www.prio-n.com
7
A path traversal flaw was found in Buildah in versions before 1.14.5. This flaw allows an attacker to trick a user into building a malicious container image hosted on an HTTP(s) server and then write files to the user’s system anywhere that the user has permissions.
| CPE | Name | Operator | Version |
|---|---|---|---|
| buildah | lt | 1.14.5 | |
| enterprise_linux | eq | 7.0 | |
| enterprise_linux | eq | 8.0 | |
| openshift_container_platform | eq | 3.11 |
Related
cve
cve
CVE-2020-10696
2020-03-31 22:15:14
almalinux
almalinux
Important: container-tools:2.0 security update
2020-04-28 16:07:22
Important: container-tools:rhel8 security update
2020-04-28 16:07:32
Important: container-tools:1.0 security and bug fix update
2020-04-28 16:06:48
osv
osv
Important: container-tools:rhel8 security update
2020-04-28 16:07:32
Important: container-tools:rhel8 security update
2020-04-28 16:07:32
Important: container-tools:1.0 security and bug fix update
2020-04-28 16:06:48
nvd
nvd
CVE-2020-10696
2020-03-31 22:15:14
nessus
nessus
Rocky Linux 8 : container-tools:1.0 (RLSA-2020:1926)
2023-11-06 00:00:00
CentOS 8 : container-tools:2.0 (CESA-2020:1931)
2021-02-01 00:00:00
RHEL 8 : OpenShift Container Platform 4.2.28 (RHSA-2020:1401)
2020-04-14 00:00:00
redhat
redhat
(RHSA-2020:1931) Important: container-tools:2.0 security update
2020-04-28 16:07:22
(RHSA-2020:1449) Low: OpenShift Container Platform 4.1.41 security update
2020-04-22 15:31:37
oraclelinux
oraclelinux
container-tools:2.0 security update
2020-05-12 00:00:00
container-tools:ol8 security update
2020-05-12 00:00:00
container-tools:2.0 security update
2021-03-05 00:00:00
redhatcve
redhatcve
CVE-2020-10696
2020-04-14 19:28:33
ubuntucve
ubuntucve
CVE-2020-10696
2020-03-31 00:00:00
rocky
rocky
container-tools:2.0 security update
2020-04-28 16:07:22
container-tools:rhel8 security update
2020-04-28 16:07:32
container-tools:1.0 security and bug fix update
2020-04-28 16:06:48
veracode
veracode
Directory Traversal
2020-04-02 06:05:06
cvelist
cvelist
CVE-2020-10696
2020-03-31 21:01:22
debiancve
debiancve
CVE-2020-10696
2020-03-31 22:15:14
alpinelinux
alpinelinux
CVE-2020-10696
2020-03-31 22:15:14
github
github
Path Traversal in Buildah
2021-05-18 18:32:41
suse
suse
Security update for buildah (moderate)
2020-11-29 00:00:00
Security update for buildah, libcontainers-common, podman (moderate)
2021-02-19 00:00:00
Security update for buildah (important)
2022-10-26 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:3423-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:4350-1)
2022-12-08 00:00:00
openSUSE: Security Advisory for buildah, (openSUSE-SU-2021:0310-1)
2021-04-16 00:00:00