CVE-2024-21626

Este repositorio no tiene un README...

CVE-2024-21626

PoC de CVE-2024-21626 Lee mi artículo completo para una explicación detallada aquí. Artículo relacionado Mientras investigaba CVE-2024–21626 , descubrí una vulnerabilidad pasada por alto en versiones antiguas de Docker y runC. Para obtener más información sobre lo que encontré, lee el siguiente...

Rocky Linux 8.6 [CIQ] Security Update: crit / criu / criu-debuginfo / criu-debugsource / criu-devel / etc (ciqsa-2026_1080)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261080 advisory. This advisory aggregates security fixes for the criu SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2024-21626. Tenable has extracted the preceding description bloc...

Rocky Linux 8.6 [CIQ] Security Update: runc / runc-debuginfo / runc-debugsource (ciqsa-2026_1095)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261095 advisory. This advisory aggregates security fixes for the runc SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2024-21626. Tenable has extracted the preceding description bloc...

Rocky Linux 8.6 [CIQ] Security Update: podman / podman-catatonit / podman-catatonit-debuginfo / etc (ciqsa-2026_1081)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261081 advisory. This advisory aggregates security fixes for the podman SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2024-21626. Tenable has extracted the preceding description...

container-escape-ebpf

Documento técnico https://www.scs-europe.net/dlib/2026/2026-0321.html Suposiciones El host ejecuta una versión vulnerable de runc: Para CVE-2025-31133: 1.2.7 y anteriores, 1.3.0-rc.1 hasta 1.3.2, 1.4.0-rc.1 y 1.4.0-rc.2. Para CVE-2024-21626: 1.0.0-rc93 hasta 1.1.11. Un usuario no privilegiado pue...

CVE-2024-21626-old-docker-versions

오래된 runc 구성요소의 컨테이너 탈출 취약점 CVE-2024-21626 CVE-2024-21626에 대한 분석 중에 다른 오래된 Docker 구성 요소들이 fd 누출 에 취약하다는 것을 발견했습니다 보안 권고 GHSA-xr7r-f8xq-vfvv에는 언급되지 않은 내용입니다. 자세한 설명은 제 전체 글 여기에서 읽을 수 있습니다. 1. 환경 설정 🔨 A. Ubuntu 18.04.6 LTS Bionic Beaver 버전 다운로드 및 설치 설치 중에 업데이트 시스템 다운로드 상자를 체크하지 마세요. B. 취약한 Docker 버전...

RHCOS 4 : OpenShift Container Platform 4.15.41 (RHSA-2024:10841)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:10841 advisory. - runc: file descriptor leak CVE-2024-21626 Note that Nessus has not tested for this issue but has instead relied only on the application's...

RHCOS 4 : OpenShift Container Platform 4.17.7 (RHSA-2024:10520)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:10520 advisory. - runc: file descriptor leak CVE-2024-21626 Note that Nessus has not tested for this issue but has instead relied only on the application's...

RHCOS 4 : Red Hat build of MicroShift 4.14.42 (RHSA-2024:10525)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:10525 advisory. - runc: file descriptor leak CVE-2024-21626 Note that Nessus has not tested for this issue but has instead relied only on the application's...

MiracleLinux 9 : runc-1.1.12-1.el9_3 (AXSA:2024-7505:01)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2024-7505:01 advisory. runc: file descriptor leak CVE-2024-21626 Tenable has extracted the preceding description block directly from the MiracleLinux security advisory. Note that...

CVE-2024-21626 affecting package podman for versions less than 5.6.1-2

CVE-2024-21626 affecting package podman for versions less than 5.6.1-2. An upgraded version of the package is available that resolves this issue...

Exploit for File Descriptor Leak in Linuxfoundation Runc

CVE-2024-21626 Root cuase & Proof of cause How to use p...

Exploit for File Descriptor Leak in Linuxfoundation Runc

CVE-2024-21626 Root cuase & Proof of cause How to use p...

NewStart CGSL MAIN 7.02 : runc Vulnerability (NS-SA-2025-0145)

The remote NewStart CGSL host, running version MAIN 7.02, has runc packages installed that are affected by a vulnerability: - runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an...

TencentOS Server 4: runc (TSSA-2024:0599)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0599 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 2: runc (TSSA-2024:0304)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0304 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

openSUSE Security Advisory (SUSE-SU-2024:0295-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.32 bug fix and security update

Red Hat OpenShift Container Platform release 4.16.32 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...

Advisory ROSA-SA-2025-2670

software: runc 1.1.7 OS: ROSA-CHROME packageevrstring: runc-1.1.7 CVE-ID: CVE-2024-21626 BDU-ID: 2024-00973 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the Runc isolated container launch tool is related to a flaw in the controlled area delimitations of the system. Exploitation of the vulnerabili...