CVE-2024-9341

containers common, redhat openshift container platform, redhat enterprise linux

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2024-9341

Katalog CVE

CVSS 8.2 · High EPSS 1,0%

Kerentanan Improper Link Resolution Before File Access ('Link Following') pada containers common, redhat openshift container platform +1 lainnya. Skor CVSS 3.1 8.2 (High) menurut NVD.

Deskripsi (NVD)

A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system into mounting sensitive host directories inside a container. This issue also allows attackers to access critical host files, bypassing the intended isolation between containers and the host system.

Rincian

Terbit di NVD
1 Oktober 2024
Terakhir diubah
13 Oktober 2026
Status NVD
Modified
CVSS 3.1
8.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-59: Improper Link Resolution Before File Access ('Link Following')
EPSS (30 hari)
1,0% peluang dieksploitasi; lebih tinggi dari 62,7% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
containers common Semua versi
redhat openshift container platform Versi 4.12
redhat openshift container platform Versi 4.13
redhat openshift container platform Versi 4.14
redhat openshift container platform Versi 4.15
redhat openshift container platform Versi 4.16
redhat openshift container platform Versi 4.17
redhat enterprise linux Versi 8.0
redhat enterprise linux Versi 9.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 13 Okt 2026, 18:25 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.