Unauthenticated Remote Attackers Can Trigger Vulnerability in Decompression Function

CVE-2024-1485

Summary

A vulnerability has been identified in the decompression function of the registry-support component provided by Red Hat. This issue can be exploited by an unauthenticated remote attacker who successfully convinces a user to parse a devfile that utilizes the 'parent' or 'plugin' keywords. The exploitation of this flaw may result in the download of a malicious archive, which, during the cleanup process, could inadvertently lead to the overwriting or deletion of files that are outside the designated archive boundaries. This behavior poses a significant security risk, allowing unauthorized access to critical system files.

References