CVE-2024-45310
MediumSummary
runc 1.1.13 and earlier, as well as 1.2.0-rc2 and earlier, can be tricked into creating empty files or directories in arbitrary locations in the host filesystem by sharing a volume between two containers and exploiting certain operations.
Risk Assessment
This may lead to unauthorized modifications to the host filesystem, posing a serious threat to the integrity and security of the container environment.
Recommendation
Update runc to a patched version and restrict volume sharing between containers.
Original NVD description (English source)
runc is a CLI tool for spawning and running containers according to the OCI specification. runc 1.1.13 and earlier, as well as 1.2.0-rc2 and earlier, can be tricked into creating empty files or directories in arbitrary locations in the host filesystem by sharing a volume between two containers and e