runc container breakout through process.cwd trickery and leaked fds
CVSS score
8.6
EPSS probability
%18.9
Risk score
1.6
Published
2 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
University laboratory demonstrating a reproducible container security scenario, including environment setup, technical analysis, demonstration, verification, and mitigation strategies.
Controlled reproduction environment for CVE-2024-21626 (runc container escape). Demonstrates container isolation failure, host reconnaissance, and controlled host executable replacement in an isolated Docker lab.
PoC for CVE-2024-21626: runc leaks an internal fd referencing the host CWD before pivot_root, enabling container escape by setting process.cwd to /proc/self/fd/7
Sk3pper/CVE-2024-21626-old-docker-versions
Similar Vulnerabilities
Improper input validation in Apache Log4j
Improper access control in N/a
Vulnerability in Apache Tomcat
mod_proxy SSRF
Vulnerability in N/a
Vulnerability in Google Chrome
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-21626"