CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-9341

A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system into mounting sensitive host directories inside a container. This issue also allows attackers to access critical host files, bypassing the intended isolation between containers and the host system.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 49.7%

CVSS Severity

CVSS v3 Score 5.4

References

Products affected by CVE-2024-9341

Containers » Common » Version: N/A

cpe:2.3:a:containers:common:-
Redhat » Openshift Container Platform » Version: 4.12

cpe:2.3:a:redhat:openshift_container_platform:4.12
Redhat » Openshift Container Platform » Version: 4.13

cpe:2.3:a:redhat:openshift_container_platform:4.13
Redhat » Openshift Container Platform » Version: 4.14

cpe:2.3:a:redhat:openshift_container_platform:4.14
Redhat » Openshift Container Platform » Version: 4.15

cpe:2.3:a:redhat:openshift_container_platform:4.15
Redhat » Openshift Container Platform » Version: 4.16

cpe:2.3:a:redhat:openshift_container_platform:4.16
Redhat » Openshift Container Platform » Version: 4.17

cpe:2.3:a:redhat:openshift_container_platform:4.17
Redhat » Enterprise Linux » Version: 8.0

cpe:2.3:o:redhat:enterprise_linux:8.0
Redhat » Enterprise Linux » Version: 9.0

cpe:2.3:o:redhat:enterprise_linux:9.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-9341

Products

Pricing

Contact Us