Yüksek CVSS 8.2
CVE-2024-9341: Common: güvenlik açığı
Açıklama (NVD)
A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system into mounting sensitive host directories inside a container. This issue also allows attackers to access critical host files, bypassing the intended isolation between containers and the host system.
Özet bilgiler
- Ürün
- Containers Common
- CVSS v3.1
- 8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N - EPSS
- %1,03 (yüzdelik 64)
- CWE
- CWE-59
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| containers-common | — | — | — |
| redhat-openshift-container-platform | 4.12 | 4.12 | — |
| redhat-openshift-container-platform | 4.13 | 4.13 | — |
| redhat-openshift-container-platform | 4.14 | 4.14 | — |
| redhat-openshift-container-platform | 4.15 | 4.15 | — |
| redhat-openshift-container-platform | 4.16 | 4.16 | — |
| redhat-openshift-container-platform | 4.17 | 4.17 | — |
| redhat-enterprise-linux | 8.0 | 8.0 | — |
| redhat-enterprise-linux | 9.0 | 9.0 | — |
Kaynaklar
- NVD kaydı
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- bugzilla.redhat.com
- github.com
- github.com
- CWE-59