Lucene search

K
osvGoogleOSV:GO-2024-3110
HistorySep 06, 2024 - 8:43 p.m.

runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

2024-09-0620:43:50
Google
osv.dev
4
runc
confusion
empty files
directories
github
opencontaibers

CVSS3

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

AI Score

6.5

Confidence

Low

runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc

CVSS3

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

AI Score

6.5

Confidence

Low