CVE-2024-21626
CVSS 3.1 Score 8.6 of 10 (high)
Details
Summary
CVE-2024-21626 is a vulnerability in runc, a CLI tool for running containers on Linux. In versions 1.1.11 and earlier, there is an internal file descriptor leak that allows an attacker to exploit the container and gain access to the host filesystem. This vulnerability can be triggered through the "runc exec" command or by using a malicious image with the "runc run" command. Successful exploitation of this vulnerability can lead to a complete escape from the container and potentially overwrite important host binaries. The issue has been addressed in runc version 1.1.12, which includes patches to fix the vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions