Test ID:	1.3.6.1.4.1.25623.1.1.10.2025.0004
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2025-0004)
Summary:	The remote host is missing an update for the 'opencontainers-runc' package(s) announced via the MGASA-2025-0004 advisory.
Description:	Summary: The remote host is missing an update for the 'opencontainers-runc' package(s) announced via the MGASA-2025-0004 advisory. Vulnerability Insight: runc 1.1.13 and earlier as well as 1.2.0-rc2 and earlier can be tricked into creating empty files or directories in arbitrary locations in the host filesystem by sharing a volume between two containers and exploiting a race with os.MkdirAll. While this can be used to create empty files, existing files **will not** be truncated. An attacker must have the ability to start containers using some kind of custom volume configuration. Containers using user namespaces are still affected, but the scope of places an attacker can create inodes can be significantly reduced. Sufficiently strict LSM policies (SELinux/Apparmor) can also in principle block this attack -- we suspect the industry standard SELinux policy may restrict this attack's scope but the exact scope of protection hasn't been analysed. This is exploitable using runc directly as well as through Docker and Kubernetes. Affected Software/OS: 'opencontainers-runc' package(s) on Mageia 9. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2024-45310
Copyright	Copyright (C) 2025 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.