8.6 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
6.9 Medium
AI Score
Confidence
Low
0.051 Low
EPSS
Percentile
93.0%
Issue Overview:
AWS is aware of CVE-2024-21626, an issue affecting the runc component of several open source container management systems. Under certain conditions, an actor could leverage a specially crafted container or container configuration to access files or directories outside the container’s file system namespace.
An updated version of runc that addresses the issue is available for Amazon Linux 1 (runc-1.1.11-1.0.amzn1), Amazon Linux 2 (runc-1.1.11-1.amzn2) and for Amazon Linux 2023 (runc-1.1.11-1.amzn2023). AWS recommends that customers using runc or any container-related software apply those updates or a newer version. (CVE-2024-21626)
Affected Packages:
runc
Issue Correction:
Run yum update runc to update your system.
New Packages:
i686:
runc-1.1.11-1.1.amzn1.i686
runc-debuginfo-1.1.11-1.1.amzn1.i686
src:
runc-1.1.11-1.1.amzn1.src
x86_64:
runc-1.1.11-1.1.amzn1.x86_64
runc-debuginfo-1.1.11-1.1.amzn1.x86_64
Red Hat: CVE-2024-21626
Mitre: CVE-2024-21626
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Amazon Linux | 1 | i686 | runc | < 1.1.11-1.1.amzn1 | runc-1.1.11-1.1.amzn1.i686.rpm |
Amazon Linux | 1 | i686 | runc-debuginfo | < 1.1.11-1.1.amzn1 | runc-debuginfo-1.1.11-1.1.amzn1.i686.rpm |
Amazon Linux | 1 | x86_64 | runc | < 1.1.11-1.1.amzn1 | runc-1.1.11-1.1.amzn1.x86_64.rpm |
Amazon Linux | 1 | x86_64 | runc-debuginfo | < 1.1.11-1.1.amzn1 | runc-debuginfo-1.1.11-1.1.amzn1.x86_64.rpm |
8.6 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
6.9 Medium
AI Score
Confidence
Low
0.051 Low
EPSS
Percentile
93.0%