CVE-2024-9341

Name of the Vulnerable Software and Affected Versions containers/common versions (affected versions not specified)

Description The issue is related to a flaw in the containers/common Go library, which incorrectly handles certain file paths when FIPS mode is enabled on a system. This allows an attacker to exploit symbolic links, tricking the system into mounting sensitive host directories inside a container and accessing critical host files, thus bypassing the intended isolation between containers and the host system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.