Dockerfile Run --mount Vulnerability: Arbitrary File Modification

CVE-2024-9407

What is CVE-2024-9407?

A security issue has been identified in the bind-propagation option utilized within the Dockerfile RUN --mount instruction. The vulnerability arises from inadequate validation of inputs supplied to this option, enabling users to introduce arbitrary parameters. This may lead to the unintended mounting of sensitive directories from the host system into a container during the build process. Moreover, it can result in the alteration of the contents of these mounted files. Importantly, this vulnerability has the potential to circumvent SELinux protections, as it allows the source directory to be relabeled, thus granting containers access to host files.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References