153 matches found
CVE-2024-21626
इस रिपॉजिटरी में README नहीं है।...
CVE-2024-21626
إثبات المفهوم لـ CVE-2024-21626 اقرأ مقالتي الكاملة للشرح المفصل هنا. مقالة ذات صلة أثناء التحقيق في CVE-2024–21626 ، اكتشفت ثغرة أمنية تم التغاضي عنها في الإصدارات الأقدم من Docker و runC. لمعرفة المزيد حول ما وجدته، اقرأ المقالة التالية: "استكشاف الثغرات الأمنية المخفية في إصدارات Docker القديم...
container-escape-ebpf
ورقة بيضاء https://www.scs-europe.net/dlib/2026/2026-0321.html الافتراضات المضيف يشغّل إصدارًا معرّضًا للثغرات من runc: لـ CVE-2025-31133: الإصدارات 1.2.7 وما دونها، و1.3.0-rc.1 حتى 1.3.2، و1.4.0-rc.1 و1.4.0-rc.2. لـ CVE-2024-21626: الإصدارات 1.0.0-rc93 حتى 1.1.11. يمكن لمستخدم غير مميَّز إنشاء...
CVE-2024-21626-old-docker-versions
ثغرة الهروب من الحاويات في مكونات runc القديمة CVE-2024-21626 أثناء تحليلي لـ CVE-2024-21626 وجدت أن مكونات docker القديمة الأخرى معرّضة لخطر تسريب واصفات الملفات fd leakage وهو أمر غير مذكور في النشرة الأمنية GHSA-xr7r-f8xq-vfvv. اقرأ مقالتي الكاملة للشرح المفصّل هنا. 1. إعداد البيئة 🔨 أ. تنزيل...
Rocky Linux 8.6 [CIQ] Security Update: runc / runc-debuginfo / runc-debugsource (ciqsa-2026_1095)
The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261095 advisory. This advisory aggregates security fixes for the runc SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2024-21626. Tenable has extracted the preceding description bloc...
Rocky Linux 8.6 [CIQ] Security Update: conmon / conmon-debuginfo / conmon-debugsource (ciqsa-2026_1091)
The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261091 advisory. This advisory aggregates security fixes for the conmon SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2024-21626. Tenable has extracted the preceding description...
Rocky Linux 8.6 [CIQ] Security Update: crit / criu / criu-debuginfo / criu-debugsource / criu-devel / etc (ciqsa-2026_1080)
The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261080 advisory. This advisory aggregates security fixes for the criu SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2024-21626. Tenable has extracted the preceding description bloc...
Rocky Linux 8.6 [CIQ] Security Update: buildah / buildah-debuginfo / buildah-debugsource / buildah-tests / etc (ciqsa-2026_1096)
The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261096 advisory. This advisory aggregates security fixes for the buildah SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2024-21626. Tenable has extracted the preceding description...
Rocky Linux 8.6 [CIQ] Security Update: podman / podman-catatonit / podman-catatonit-debuginfo / etc (ciqsa-2026_1081)
The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261081 advisory. This advisory aggregates security fixes for the podman SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2024-21626. Tenable has extracted the preceding description...
Rocky Linux 8.6 [CIQ] Security Update: container-selinux (ciqsa-2026_1092)
The Rocky Linux 8.6 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20261092 advisory. This advisory aggregates security fixes for the container-selinux SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2024-21626. Tenable has extracted the preceding...
Rocky Linux 8.6 [CIQ] Security Update: slirp4netns / slirp4netns-debuginfo / slirp4netns-debugsource (ciqsa-2026_1083)
The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261083 advisory. This advisory aggregates security fixes for the slirp4netns SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2024-21626. Tenable has extracted the preceding descripti...
Rocky Linux 8.6 [CIQ] Security Update: fuse-overlayfs / fuse-overlayfs-debuginfo / etc (ciqsa-2026_1085)
The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261085 advisory. This advisory aggregates security fixes for the fuse-overlayfs SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2024-21626. Tenable has extracted the preceding...
Rocky Linux 8.6 [CIQ] Security Update: crun / crun-debuginfo / crun-debugsource (ciqsa-2026_1088)
The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261088 advisory. This advisory aggregates security fixes for the crun SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2024-21626. Tenable has extracted the preceding description bloc...
RHCOS 4 : OpenShift Container Platform 4.17.7 (RHSA-2024:10520)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:10520 advisory. - runc: file descriptor leak CVE-2024-21626 Note that Nessus has not tested for this issue but has instead relied only on the application's...
RHCOS 4 : Red Hat build of MicroShift 4.14.42 (RHSA-2024:10525)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:10525 advisory. - runc: file descriptor leak CVE-2024-21626 Note that Nessus has not tested for this issue but has instead relied only on the application's...
RHCOS 4 : OpenShift Container Platform 4.15.41 (RHSA-2024:10841)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:10841 advisory. - runc: file descriptor leak CVE-2024-21626 Note that Nessus has not tested for this issue but has instead relied only on the application's...
MiracleLinux 9 : runc-1.1.12-1.el9_3 (AXSA:2024-7505:01)
The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2024-7505:01 advisory. runc: file descriptor leak CVE-2024-21626 Tenable has extracted the preceding description block directly from the MiracleLinux security advisory. Note that...
CVE-2024-21626 affecting package podman for versions less than 5.6.1-2
CVE-2024-21626 affecting package podman for versions less than 5.6.1-2. An upgraded version of the package is available that resolves this issue...
