VDB
GO-2024-3110
GO-2024-3110
PUBLISHED
Can be confused to create empty files/directories on the host in github.com/opencontainers/runc
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| wolfi | neuvector-scanner | 0 |
| wolfi | opentelemetry-collector-contrib | 0 |
| chainguard | buildah | 0 |
| chainguard | podman | 0 |
| chainguard | grype | 0 |
| chainguard | docker | 0 |
| wolfi | kubernetes-1.27 | 0 |
| wolfi | docker | 0 |
| chainguard | runc | 0 |
| chainguard | neuvector-scanner-fips | 0 |
| wolfi | syft | 0 |
| wolfi | k8s-device-plugin | 0 |
| wolfi | ctop | 0 |
| chainguard | node-feature-discovery-0.16 | 0 |
| chainguard | neuvector | 0 |
| chainguard | kubernetes-fips-1.31 | 0 |
| wolfi | kubernetes-1.29 | 0 |
| chainguard | cluster-autoscaler-fips-1.31 | 0 |
| wolfi | grafana-alloy | 0 |
| chainguard | neuvector-scanner | 0 |
…and 28 more
Timeline
- Sep 6, 2024 CVE Published
- Feb 4, 2026 CVE Updated
References
- https://github.com/opencontainers/runc/security/advisories/GHSA-jfvp-7x6p-h2pv advisory
- https://github.com/opencontainers/runc/commit/63c2908164f3a1daea455bf5bcd8d363d70328c7 fix
- https://github.com/opencontainers/runc/commit/8781993968fd964ac723ff5f360b6f259e809a3e fix
- https://github.com/opencontainers/runc/pull/4359 fix
- https://github.com/opencontainers/runc/commit/f0b652ea61ff6750a8fcc69865d45a7abf37accf fix