Lucene search

K
githubexploit17F0090F-89AC-5757-A39B-45005DECDB39
HistoryMar 15, 2024 - 10:38 a.m.

Exploit for Exposure of Resource to Wrong Sphere in Linuxfoundation Runc

2024-03-1510:38:27
119
linuxfoundation runc
cve-2024-21626
ubuntu 22.04.1
docker
kernel vulnerability
guest additions
virtual machine
docker version
gpg key
apt repository
check vulnerability
demo repository
testopenat2
openat2 syscall
vulnerability check script

CVSS3

8.6

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.051

Percentile

93.0%

PoC of CVE-2024-21626

Read my full article for detailed explan…

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

CVSS3

8.6

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.051

Percentile

93.0%