Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
photonPhotonPHSA-2024-5.0-0199
HistoryFeb 07, 2024 - 12:00 a.m.

Important Photon OS Security Update - PHSA-2024-5.0-0199

2024-02-0700:00:00
github.com
12
photon os
security update
phsa-2024-5.0-0199
ansible
unix

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

AI Score

Confidence

High

0.051 Low

EPSS

Percentile

93.0%

JSON

Updates of [‘ansible’, ‘runc’] packages of Photon OS have been released.

Related

photon 5
nessus 61
oraclelinux 7
almalinux 5
osv 13
redhat 19
ubuntucve 2
prion 3
cvelist 3
nvd 3
cbl_mariner 11
veracode 2
fedora 4
openvas 16
debiancve 2
mageia 1
redhatcve 2
cve 3
github 3
kaspersky 2
amazon 1
packetstorm 2
redos 1
githubexploit 7
ibm 3
metasploit 1
alpinelinux 1
wolfi 1
ubuntu 1
zdt 3
f5 1
rocky 1
mscve 1
debian 2
cgr 1
vmware 2
hivepro 1
exploitdb 1
attackerkb 1
photon
photon
Moderate Photon OS Security Update - PHSA-2024-4.0-0561
2024-02-07 00:00:00
Moderate Photon OS Security Update - PHSA-2024-3.0-0724
2024-02-12 00:00:00
Critical Photon OS Security Update - PHSA-2023-5.0-0143
2023-11-15 00:00:00
nessus
nessus
Fedora 39 : ansible-core (2024-0d894565a0)
2024-01-23 00:00:00
CentOS 8 : ansible-core bug fix, enhancement, and (CESA-2024:3043)
2024-05-22 00:00:00
Oracle Linux 9 : ansible-core (ELSA-2024-2246)
2024-05-06 00:00:00
oraclelinux
oraclelinux
ansible-core bug fix, enhancement, and security update
2024-05-02 00:00:00
ansible-core bug fix, enhancement, and security update
2024-05-23 00:00:00
container-tools:ol8 security update
2024-02-14 00:00:00
almalinux
almalinux
Moderate: ansible-core bug fix, enhancement, and security update
2024-04-30 00:00:00
Moderate: ansible-core bug fix, enhancement, and security update
2024-05-22 00:00:00
Important: container-tools:rhel8 security update
2024-02-08 00:00:00
osv
osv
Moderate: ansible-core bug fix, enhancement, and security update
2024-04-30 00:00:00
Ansible-core information disclosure flaw
2024-02-06 12:30:31
PYSEC-2024-36
2024-02-06 12:15:00
redhat
redhat
(RHSA-2024:2246) Moderate: ansible-core bug fix, enhancement, and security update
2024-04-30 06:15:09
(RHSA-2024:3043) Moderate: ansible-core bug fix, enhancement, and security update
2024-05-22 06:35:26
(RHSA-2024:0752) Important: container-tools:rhel8 security update
2024-02-08 17:22:59
ubuntucve
ubuntucve
CVE-2024-0690
2024-02-06 00:00:00
CVE-2024-21626
2024-01-31 00:00:00
prion
prion
Information disclosure
2024-02-06 12:15:00
Design/Logic Flaw
2024-01-31 22:15:00
Authentication flaw
2023-11-14 21:15:00
cvelist
cvelist
CVE-2024-0690 Ansible-core: possible information leak in tasks that ignore ansible_no_log configuration
2024-02-06 12:00:28
CVE-2024-21626 runc container breakout through process.cwd trickery and leaked fds
2024-01-31 21:31:14
CVE-2023-34060
2023-11-14 20:20:51
nvd
nvd
CVE-2024-0690
2024-02-06 12:15:55
CVE-2024-21626
2024-01-31 22:15:53
CVE-2023-34060
2023-11-14 21:15:09
cbl_mariner
cbl_mariner
CVE-2024-0690 affecting package ansible for versions less than 2.14.12-2
2024-06-12 22:23:00
CVE-2024-0690 affecting package ansible for versions less than 2.17.0-1
2024-05-31 18:55:08
CVE-2024-21626 affecting package cri-tools for versions less than 1.28.0-5
2024-02-25 03:00:06
veracode
veracode
Information Disclosure
2024-01-22 10:11:42
Sandbox Escape
2024-02-01 12:28:33
fedora
fedora
[SECURITY] Fedora 38 Update: ansible-core-2.14.11-2.fc38
2024-01-23 01:23:09
[SECURITY] Fedora 39 Update: ansible-core-2.16.2-2.fc39
2024-01-24 01:30:01
[SECURITY] Fedora 38 Update: runc-1.1.12-1.fc38
2024-02-11 05:39:52
openvas
openvas
Fedora: Security Advisory for ansible-core (FEDORA-2024-0d894565a0)
2024-01-24 00:00:00
Fedora: Security Advisory for ansible-core (FEDORA-2024-cfa5a5cbac)
2024-01-23 00:00:00
Huawei EulerOS: Security Advisory for docker-runc (EulerOS-SA-2024-1739)
2024-05-30 00:00:00
debiancve
debiancve
CVE-2024-0690
2024-02-06 12:15:55
CVE-2024-21626
2024-01-31 22:15:53
mageia
mageia
Updated python-ansible-core packages fix security vulnerability
2024-06-25 19:12:04
redhatcve
redhatcve
CVE-2024-0690
2024-01-18 16:40:36
CVE-2024-21626
2024-01-31 21:41:31
cve
cve
CVE-2024-0690
2024-02-06 12:15:55
CVE-2024-21626
2024-01-31 22:15:53
CVE-2023-34060
2023-11-14 21:15:09
github
github
Ansible-core information disclosure flaw
2024-02-06 12:30:31
Talos Linux ships runc vulnerable to the escape to the host attack
2024-02-02 18:11:06
runc vulnerable to container breakout through process.cwd trickery and leaked fds
2024-01-31 22:44:08
kaspersky
kaspersky
KLA64657 PE vulnerability in Microsoft Azure
2024-02-28 00:00:00
KLA64658 PE vulnerability in Microsoft Mariner
2024-02-28 00:00:00
amazon
amazon
Important: runc
2024-01-25 19:21:00
packetstorm
packetstorm
runc 1.1.11 File Descriptor Leak Privilege Escalation
2024-02-05 00:00:00
VMware Cloud Director 10.5 Authentication Bypass
2024-03-13 00:00:00
redos
redos
ROS-20240410-18
2024-04-10 00:00:00
githubexploit
githubexploit
Exploit for CVE-2024-21626
2024-02-07 07:38:22
Exploit for File Descriptor Leak in Linuxfoundation Runc
2024-04-10 09:12:06
Exploit for File Descriptor Leak in Linuxfoundation Runc
2024-03-15 10:38:27
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a security bypass in Open Container Initiative runc [CVE-2024-21626]
2024-03-28 22:00:56
Security Bulletin: IBM Cloud Kubernetes Service is affected by a containerd security vulnerability (CVE-2024-21626)
2024-02-21 17:30:04
Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a runc security vulnerability (CVE-2024-21626)
2024-03-01 10:30:03
metasploit
metasploit
runc (docker) File Descriptor Leak Privilege Escalation
2024-02-01 20:28:04
alpinelinux
alpinelinux
CVE-2024-21626
2024-01-31 22:15:53
wolfi
wolfi
CVE-2024-21626 vulnerabilities
2024-06-25 15:33:25
ubuntu
ubuntu
runC vulnerability
2024-01-31 00:00:00
zdt
zdt
runc 1.1.11 File Descriptor Leak Privilege Escalation Exploit
2024-02-05 00:00:00
VMware Cloud Director 10.5 - Bypass identity verification Exploit
2024-03-12 00:00:00
VMware Cloud Director - Bypass identity verification Exploit
2023-12-08 00:00:00
f5
f5
K000140043: runc vulnerability CVE-2024-21626
2024-06-18 00:00:00
rocky
rocky
container-tools:rhel8 security update
2024-02-12 20:17:26
mscve
mscve
GitHub: CVE-2024-21626 Container breakout through process.cwd trickery and leaked fds
2024-02-28 08:00:00
debian
debian
[SECURITY] [DSA 5615-1] runc security update
2024-02-04 18:54:32
[SECURITY] [DLA 3735-1] runc security update
2024-02-19 02:28:00
cgr
cgr
CVE-2024-21626 vulnerabilities
2024-05-19 03:07:16
vmware
vmware
VMware Cloud Director Appliance contains an authentication bypass vulnerability (CVE-2023-34060).
2023-11-14 00:00:00
VMware Cloud Director Appliance contains an authentication bypass vulnerability (CVE-2023-34060).
2023-11-14 00:00:00
hivepro
hivepro
VMware Unveils Critical Authentication Bypass Vulnerability in VCD Appliance
2023-11-17 08:07:39
exploitdb
exploitdb
VMware Cloud Director 10.5 - Bypass identity verification
2024-03-12 00:00:00
attackerkb
attackerkb
CVE-2019-5736
2019-02-11 00:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

AI Score

Confidence

High

0.051 Low

EPSS

Percentile

93.0%

JSON
Related for PHSA-2024-5.0-0199
photon5nessus61oraclelinux7almalinux5osv13redhat19ubuntucve2prion3cvelist3nvd3cbl_mariner11veracode2fedora4openvas16debiancve2mageia1redhatcve2cve3github3kaspersky2amazon1packetstorm2redos1githubexploit7ibm3metasploit1alpinelinux1wolfi1ubuntu1zdt3f51rocky1mscve1debian2cgr1vmware2hivepro1exploitdb1attackerkb1