runc container breakout through process.cwd trickery and leaked fds
CVSS Skor
8.6
EPSS İhtimal
%18.9
Risk Skoru
1.6
Yayın
2 yıl önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
University laboratory demonstrating a reproducible container security scenario, including environment setup, technical analysis, demonstration, verification, and mitigation strategies.
Controlled reproduction environment for CVE-2024-21626 (runc container escape). Demonstrates container isolation failure, host reconnaissance, and controlled host executable replacement in an isolated Docker lab.
PoC for CVE-2024-21626: runc leaks an internal fd referencing the host CWD before pivot_root, enabling container escape by setting process.cwd to /proc/self/fd/7
Sk3pper/CVE-2024-21626-old-docker-versions
İlgili Benzer Açıklar
Improper input validation in Apache Log4j
Improper access control in N/a
Vulnerability in Apache Tomcat
mod_proxy SSRF
Vulnerability in N/a
Vulnerability in Google Chrome
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-21626"