{
  "cveId": "CVE-2024-45310",
  "url": "https://patchblox.com/security/cve/CVE-2024-45310",
  "summary": "CVE-2024-45310 is fixed in 9 products on 1 platform, first by DEBIAN-CVE-2024-45310, released September 3, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "apptainer: This update for apptainer fixes the following issues:\n\nSecurity fixes:\n\n- CVE-2024-45310: Fixed runc being tricked in...",
  "description": "This update for apptainer fixes the following issues:\n\nSecurity fixes:\n\n- CVE-2024-45310: Fixed runc being tricked into creating empty \n  files/directories on host (bsc#1257432)\n- CVE-2025-65105: Fixed security bypass due to disabling security \n  options (bsc#1255462)\n- CVE-2025-47914: Fixed malformed constraint may cause denial of \n  service in golang.org/x/crypto/ssh/agent (bsc#1253967)\n- CVE-2025-58181: Fixed unbounded memory consumption in \n  golang.org/x/crypto/ssh (bsc#1253784)\n- CVE-2025-47913: Fixed potential denial of service in \n  golang.org/x/crypto/ssh/agent (bsc#1253506)\n- CVE-2025-22872: Fixed incorrect Neutralization of Input During \n  Web Page Generation in x/net (bsc#1241710)\n- CVE-2025-22870: Fixed HTTP Proxy bypass using IPv6 Zone IDs in \n  golang.org/x/net (bsc#1238611)\n- CVE-2025-22869: Fixed potential denial of service in \n  golang.org/x/crypto (bsc#1239322)\n- CVE-2025-27144: Fixed DoS in go-jose Parsing in \n  github.com/go-jose/go-jose (bsc#1237608)\n- CVE-2025-8556: Fixed missing and wrong validation can lead \n  to incorrect results in github.com/cloudflare/circl\n\nOther fixes:\n\n- Update to 1.4.5",
  "published": "2024-09-03T19:15:15Z",
  "severity": "low",
  "cvss": 3.6,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
  "epss": 0.00317,
  "epssPercentile": 0.24793,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "apptainer",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "1.4.5-150600.4.12.1",
      "fix": "SUSE-SU-2026:0439-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0439-1",
      "released": "2026-02-11T09:30:02Z"
    },
    {
      "platform": "linux",
      "product": "apptainer",
      "release": "sles 15.7",
      "fixedVersion": "1.4.5-150600.4.12.1",
      "fix": "SUSE-SU-2026:0439-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0439-1",
      "released": "2026-02-11T09:30:02Z"
    },
    {
      "platform": "linux",
      "product": "cadvisor",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "0.60.3-bp160.1.1",
      "fix": "OPENSUSE-SU-2026:21265-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21265-1",
      "released": "2026-07-06T16:05:20Z"
    },
    {
      "platform": "linux",
      "product": "ctop",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "0.7.7-bp160.2.1",
      "fix": "OPENSUSE-SU-2026:21379-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21379-1",
      "released": "2026-07-18T19:25:19Z"
    },
    {
      "platform": "linux",
      "product": "ecs-init",
      "release": "amzn 2023",
      "fixedVersion": "1.89.1-1.amzn2023",
      "fix": "ALAS2023-2025-886",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-886",
      "released": "2025-02-27T00:26:00Z"
    },
    {
      "platform": "linux",
      "product": "kubevirt",
      "release": "sles 15.7",
      "fixedVersion": "1.7.0-150700.3.16.2",
      "fix": "SUSE-SU-2026:0479-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0479-1",
      "released": "2026-02-12T15:34:08Z"
    },
    {
      "platform": "linux",
      "product": "runc",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "1.1.15\u002Bds1-1",
      "fix": "DEBIAN-CVE-2024-45310",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-45310",
      "released": "2024-09-03T19:15:15Z"
    },
    {
      "platform": "linux",
      "product": "runc",
      "release": "Debian 14",
      "fixedVersion": "1.1.15\u002Bds1-1",
      "fix": "DEBIAN-CVE-2024-45310",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-45310",
      "released": "2024-09-03T19:15:15Z"
    },
    {
      "platform": "linux",
      "product": "runc",
      "release": "amzn 2023",
      "fixedVersion": "1.1.14-1.amzn2023.0.1",
      "fix": "ALAS2023-2024-725",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-725",
      "released": "2024-10-10T03:02:00Z"
    },
    {
      "platform": "linux",
      "product": "runc",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "1.2.6-150000.73.2",
      "fix": "SUSE-SU-2025:02198-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02198-1",
      "released": "2025-07-02T09:22:54Z"
    },
    {
      "platform": "linux",
      "product": "runc",
      "release": "sles 15.6",
      "fixedVersion": "1.2.6-150000.73.2",
      "fix": "SUSE-SU-2025:02198-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02198-1",
      "released": "2025-07-02T09:22:54Z"
    },
    {
      "platform": "linux",
      "product": "runc",
      "release": "sles 15.7",
      "fixedVersion": "1.2.6-150000.73.2",
      "fix": "SUSE-SU-2025:02198-2",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02198-2",
      "released": "2025-07-16T09:09:00Z"
    },
    {
      "platform": "linux",
      "product": "runc-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1.1.14-1.amzn2023.0.1",
      "fix": "ALAS2023-2024-725",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-725",
      "released": "2024-10-10T03:02:00Z"
    },
    {
      "platform": "linux",
      "product": "runc-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "1.1.14-1.amzn2023.0.1",
      "fix": "ALAS2023-2024-725",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-725",
      "released": "2024-10-10T03:02:00Z"
    },
    {
      "platform": "linux",
      "product": "squashfuse",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "0.5.0-150600.3.2.1",
      "fix": "SUSE-SU-2026:0439-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0439-1",
      "released": "2026-02-11T09:30:02Z"
    },
    {
      "platform": "linux",
      "product": "squashfuse",
      "release": "sles 15.7",
      "fixedVersion": "0.5.0-150600.3.2.1",
      "fix": "SUSE-SU-2026:0439-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0439-1",
      "released": "2026-02-11T09:30:02Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}