Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-45310US | low3.6 | — | ||
runc is a CLI tool for spawning and running containers according to the OCI specification. runc 1.1.13 and earlier, as well as 1.2.0-rc2 and earlier, can be tricked into creating e… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/opencontainers/runc/commit/63c2908164f3a1daea455bf5bcd8d363d70328c7FIX
- https://github.com/opencontainers/runc/commit/8781993968fd964ac723ff5f360b6f259e809a3eFIX
- https://github.com/opencontainers/runc/commit/f0b652ea61ff6750a8fcc69865d45a7abf37accfFIX
- https://github.com/opencontainers/runc/pull/4359FIX
- https://github.com/opencontainers/runc/security/advisories/GHSA-jfvp-7x6p-h2pvADVISORY
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan