Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2024:9200

Опубликовано: 17 мар. 2025
Источник: rocky
Оценка: Moderate

Описание

Moderate: runc security update

The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime.

Security Fix(es):

  • golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.

Затронутые продукты

  • Rocky Linux 9

НаименованиеАрхитектураРелизRPM
runcx86_644.el9runc-1.1.13-4.el9.x86_64.rpm

Показывать по

Связанные CVE

Исправления

Связанные уязвимости

CVSS3: 5.9
ubuntu
больше 1 года назад

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.

CVSS3: 7.5
redhat
больше 1 года назад

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.

CVSS3: 5.9
nvd
больше 1 года назад

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.

CVSS3: 5.9
debian
больше 1 года назад

A malformed DNS message in response to a query can cause the Lookup fu ...

CVSS3: 6.5
redos
около 1 года назад

Уязвимость consul