4 findings

Vulnerabilities

CVE-2024-21626

runc container breakout through leaked file descriptors

Published 31 Jan 2024 View advisory ↗

High Not deployed

Executive summary

No production impact identified

runc 1.1.11 is present in a retained legacy-worker image. That image is stored but is not deployed in a connected environment, so no production impact was identified.

Last analysed 2 minutes ago

Impact scope

1 affected component · 0 environments

Not deployed

Affected components

legacy-worker

Container image · legacy-worker:12

Stored

Matched package

runc@1.1.11

Affected environments

No connected environment

The affected component is inventoried but is not deployed to Production or Staging.

Detected package

runc@1.1.11

Fixed version

runc@1.1.12

Match confidence

Confirmed inventory

Component and environment evidence

01 · Component

legacy-worker

legacy-worker:12

Container image · contains runc@1.1.11

02 · Environment

Not running

None