PT-2022-25745 · Buildah+2 · Buildah+2

Sage Mctaggart · Published 2022-11-22 · Updated 2025-04-22 · CVE-2022-4123

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Buildah (affected versions not specified)

Description A flaw was found in Buildah, where incorrect absolute path traversal may disclose the local path and the lowest subdirectory, resulting in an impact to confidentiality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Relative Path Traversal

Path traversal

Weakness Enumeration

CWE-23

CWE-22

Related Identifiers

ALT-PU-2023-1146

AZL-11587

AZL-36977

BDU:2025-11967

CVE-2022-4123

GHSA-RPRG-4V7Q-87V7

GO-2022-1159

Affected Products

Alt Linux

Buildah

Debian

References · 22

• https://osv.dev/vulnerability/AZL-36977 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-4123 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-4123 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-rprg-4v7q-87v7 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-11967 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-4123 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-4123 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-11587 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0811SE18 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-4123 · Security Note
• https://osv.dev/vulnerability/CVE-2022-4123 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-4123 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2022-1159 · Vendor Advisory
• https://github.com/containers/podman · Note
• https://github.com/containers/podman/pull/13531 · Note