Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-45310US | low3.6 | — | ||
runc is a CLI tool for spawning and running containers according to the OCI specification. runc 1.1.13 and earlier, as well as 1.2.0-rc2 and earlier, can be tricked into creating e… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/opencontainers/runc/commit/63c2908164f3a1daea455bf5bcd8d363d70328c7FIX
- https://github.com/opencontainers/runc/commit/8781993968fd964ac723ff5f360b6f259e809a3eFIX
- https://github.com/opencontainers/runc/commit/f0b652ea61ff6750a8fcc69865d45a7abf37accfFIX
- https://github.com/opencontainers/runc/pull/4359FIX
- https://github.com/opencontainers/runc/security/advisories/GHSA-jfvp-7x6p-h2pvADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan