Description

A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system into mounting sensitive host directories inside a container. This issue also allows attackers to access critical host files, bypassing the intended isolation between containers and the host system.

INFO

Published Date :

2024-10-01T18:52:00.686Z

Last Modified :

2026-03-19T17:19:44.851Z

Source :

redhat
AFFECTED PRODUCTS

The following products are affected by CVE-2024-9341 vulnerability.

Vendors Products
Containers
  • Common
Redhat
  • Enterprise Linux
  • Openshift
  • Openshift Container Platform
  • Openshift Ironic
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-9341.

URL Resource
https://access.redhat.com/errata/RHSA-2024:10147 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:10818 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:7925 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:8039 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:8112 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:8238 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:8263 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:8428 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:8690 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:8694 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:8846 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:9454 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:9459 cve-icon cve-icon
https://access.redhat.com/security/cve/CVE-2024-9341 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=2315691 cve-icon cve-icon
https://github.com/containers/common/blob/384f77532f67afc8a73d8e0c4adb0d195df57714/pkg/subscriptions/subscriptions.go#L169 cve-icon cve-icon cve-icon
https://github.com/containers/common/blob/384f77532f67afc8a73d8e0c4adb0d195df57714/pkg/subscriptions/subscriptions.go#L349 cve-icon cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-9341 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-9341 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact