GO-2024-2491
Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc
At a glance
- Published
- Updated
- CVE
- CVE-2024-21626
- Aliases
- GHSA-xr7r-f8xq-vfvv
Description
Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc
Affected packages
| Package | Versions |
|---|---|
| Go · github.com/opencontainers/runc | introduced 1.0.0-rc93, fixed 1.1.12 |
References
- https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv ADVISORY
- https://github.com/opencontainers/runc/commit/02120488a4c0fc487d1ed2867e901eeed7ce8ecf FIX
- http://packetstormsecurity.com/files/176993/runc-1.1.11-File-Descriptor-Leak-Privilege-Escalation.html WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |