Skip to content
OpenAdvisories
High DLA-3735-1 2 CVEs

runc - security update

Published Feb 19, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 runc 1.0.0~rc6+dfsg1-3+deb10u3

Vulnerabilities 2

  • High 8.6
    CVE-2024-21626 Public exploit EPSS 19%

    runc container breakout through process.cwd trickery and leaked fds

    runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process (from runc exec) to have a worki…

    opencontainers runc zot kubescape Debian Ubuntu Azure Linux Alpine Wolfi Go
  • Medium 6.0
    CVE-2021-43784

    Overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration

    runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc, netlink is used internally as a serialization system for specifying the relevant container configuration to the `C` portion of the code (responsible f…

    opencontainers runc runc github.com/opencontainers/runc Debian Ubuntu Azure Linux Alpine Go