Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/buildah@1:1.29.1-10.4.rhaos4.14?arch=el8
purl pkg:rpm/redhat/buildah@1:1.29.1-10.4.rhaos4.14?arch=el8
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-6nrn-u58x-mben
Aliases:
CVE-2024-1394
GHSA-78hx-gp6g-7mj6
Memory leaks in code encrypting and verifying RSA payloads Using crafted public RSA keys which are not compliant with SP 800-56B can cause a small memory leak when encrypting and verifying payloads. An attacker can leverage this flaw to gradually erode available memory to the point where the host crashes for lack of resources. Upon restart the attacker would have to begin again, but nevertheless there is the potential to deny service. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:48:57.367072+00:00 RedHat Importer Affected by VCID-6nrn-u58x-mben https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-1394.json 38.0.0