| id: GO-2024-3110 |
| modules: |
| - module: github.com/opencontainers/runc |
| versions: |
| - fixed: 1.1.14 |
| - introduced: 1.2.0-rc.1 |
| - fixed: 1.2.0-rc.3 |
| vulnerable_at: 1.2.0-rc.2 |
| summary: runc can be confused to create empty files/directories on the host in github.com/opencontainers/runc |
| cves: |
| - CVE-2024-45310 |
| ghsas: |
| - GHSA-jfvp-7x6p-h2pv |
| references: |
| - advisory: https://github.com/opencontainers/runc/security/advisories/GHSA-jfvp-7x6p-h2pv |
| - advisory: https://nvd.nist.gov/vuln/detail/CVE-2024-45310 |
| - fix: https://github.com/opencontainers/runc/commit/63c2908164f3a1daea455bf5bcd8d363d70328c7 |
| - fix: https://github.com/opencontainers/runc/commit/8781993968fd964ac723ff5f360b6f259e809a3e |
| - fix: https://github.com/opencontainers/runc/commit/f0b652ea61ff6750a8fcc69865d45a7abf37accf |
| - fix: https://github.com/opencontainers/runc/pull/4359 |
| source: |
| id: GHSA-jfvp-7x6p-h2pv |
| created: 2024-09-06T13:02:07.367932-04:00 |
| review_status: UNREVIEWED |
