Количество 22
Количество 22
GHSA-mc76-5925-c5p6
Link Following in github.com/containers/common
CVE-2024-9341
A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system into mounting sensitive host directories inside a container. This issue also allows attackers to access critical host files, bypassing the intended isolation between containers and the host system.
CVE-2024-9341
A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system into mounting sensitive host directories inside a container. This issue also allows attackers to access critical host files, bypassing the intended isolation between containers and the host system.
CVE-2024-9341
A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system into mounting sensitive host directories inside a container. This issue also allows attackers to access critical host files, bypassing the intended isolation between containers and the host system.
CVE-2024-9341
Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library
CVE-2024-9341
A flaw was found in Go. When FIPS mode is enabled on a system, contain ...
ROS-20241029-13
Уязвимость containers-common
ROS-20241029-04
Уязвимость podman
BDU:2024-09461
Уязвимость библиотеки containers-common языка программирования Golang, связанная с неправильным разрешением ссылки перед доступом к файлу, позволяющая нарушителю получить доступ к конфиденциальной информации
SUSE-SU-2024:3546-1
Security update for podman
SUSE-SU-2024:3545-1
Security update for buildah
ELSA-2024-8846
ELSA-2024-8846: container-tools:ol8 security update (IMPORTANT)
SUSE-SU-2024:4303-1
Security update for buildah
SUSE-SU-2024:3988-1
Security update for buildah
RLSA-2024:8039
Important: podman security update
ELSA-2024-8112
ELSA-2024-8112: buildah security update (IMPORTANT)
ELSA-2024-8039
ELSA-2024-8039: podman security update (IMPORTANT)
SUSE-SU-2025:0267-1
Security update for podman
ELSA-2024-9459
ELSA-2024-9459: buildah security update (IMPORTANT)
ELSA-2024-9454
ELSA-2024-9454: podman security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-mc76-5925-c5p6 Link Following in github.com/containers/common | CVSS3: 5.4 | 0% Низкий | около 1 года назад |
 | CVE-2024-9341 A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system into mounting sensitive host directories inside a container. This issue also allows attackers to access critical host files, bypassing the intended isolation between containers and the host system. | CVSS3: 5.4 | 0% Низкий | около 1 года назад |
 | CVE-2024-9341 A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system into mounting sensitive host directories inside a container. This issue also allows attackers to access critical host files, bypassing the intended isolation between containers and the host system. | CVSS3: 5.4 | 0% Низкий | около 1 года назад |
 | CVE-2024-9341 A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system into mounting sensitive host directories inside a container. This issue also allows attackers to access critical host files, bypassing the intended isolation between containers and the host system. | CVSS3: 5.4 | 0% Низкий | около 1 года назад |
 | CVE-2024-9341 Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library | CVSS3: 5.4 | 0% Низкий | около 2 месяцев назад |
| CVE-2024-9341 A flaw was found in Go. When FIPS mode is enabled on a system, contain ... | CVSS3: 5.4 | 0% Низкий | около 1 года назад |
 | ROS-20241029-13 Уязвимость containers-common | CVSS3: 5.4 | 0% Низкий | 12 месяцев назад |
| ROS-20241029-04 Уязвимость podman | CVSS3: 5.4 | 0% Низкий | 12 месяцев назад |
 | BDU:2024-09461 Уязвимость библиотеки containers-common языка программирования Golang, связанная с неправильным разрешением ссылки перед доступом к файлу, позволяющая нарушителю получить доступ к конфиденциальной информации | CVSS3: 5.4 | 0% Низкий | около 1 года назад |
 | SUSE-SU-2024:3546-1 Security update for podman | около 1 года назад | ||
| SUSE-SU-2024:3545-1 Security update for buildah | около 1 года назад | ||
| ELSA-2024-8846 ELSA-2024-8846: container-tools:ol8 security update (IMPORTANT) | 12 месяцев назад | ||
| SUSE-SU-2024:4303-1 Security update for buildah | 10 месяцев назад | ||
| SUSE-SU-2024:3988-1 Security update for buildah | 11 месяцев назад | ||
 | RLSA-2024:8039 Important: podman security update | 12 месяцев назад | ||
| ELSA-2024-8112 ELSA-2024-8112: buildah security update (IMPORTANT) | около 1 года назад | ||
| ELSA-2024-8039 ELSA-2024-8039: podman security update (IMPORTANT) | около 1 года назад | ||
| SUSE-SU-2025:0267-1 Security update for podman | 9 месяцев назад | ||
| ELSA-2024-9459 ELSA-2024-9459: buildah security update (IMPORTANT) | 11 месяцев назад | ||
| ELSA-2024-9454 ELSA-2024-9454: podman security update (IMPORTANT) | 11 месяцев назад |
Уязвимостей на страницу