VDB
GO-2023-1627
GO-2023-1627
PUBLISHED
Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | podman | 0, 0, 0 |
| wolfi | ctop | 0, 0, 0 |
| github.com | opencontainers/runc | 1.0.0-rc95, 1.0.0-rc95 |
| wolfi | cadvisor | *, *, * |
| chainguard | cadvisor | *, * |
| wolfi | podman | 0, 0, 0 |
| chainguard | ctop | 0, 0 |
Timeline
- Aug 20, 2024 CVE Published
- Feb 4, 2026 CVE Updated
References
- https://github.com/advisories/GHSA-vpvm-3wq2-2wvm advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FYVE3GB4OG3BNT5DLQHYO4M5SXX33AQ5 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DHGVGGMKGZSJ7YO67TGGPFEHBYMS63VF url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNB2UEDIIJCRQW4WJLZOPQJZXCVSXMLD url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FYVE3GB4OG3BNT5DLQHYO4M5SXX33AQ5 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I6BF24VCZRFTYBTT3T7HDZUOTKOTNPLZ url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ANUGDBJ7NBUMSUFZUSKU3ZMQYZ2Z3STN url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DHGVGGMKGZSJ7YO67TGGPFEHBYMS63VF url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNB2UEDIIJCRQW4WJLZOPQJZXCVSXMLD url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I6BF24VCZRFTYBTT3T7HDZUOTKOTNPLZ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ANUGDBJ7NBUMSUFZUSKU3ZMQYZ2Z3STN url
- https://github.com/opencontainers/runc/pull/3785 fix
- https://github.com/opencontainers/runc/issues/2197#issuecomment-1437617334 discussion
- https://gist.github.com/LiveOverflow/c937820b688922eb127fb760ce06dab9 exploit
- https://lists.debian.org/debian-lts-announce/2023/03/msg00023.html advisory
- https://github.com/opencontainers/runc/issues/3751 discussion
- https://github.com/opencontainers/runc/releases/tag/v1.1.5 fix