coldbraid

CVE-2024-21626 Opencontainers Runc

runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process (from runc exec) to have a…

CVSS
8.6 High
EPSS
19%
Percentile
97
Published
2024-01-31
Force
8 of 12
Public PoC
21

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

CWE-403CWE-668CWE-200

In the news