CVE Series: “Leaky Vessels” Container Breakout (CVE-2024-21626)
CVE-2024-21626 is a severe vulnerability affecting all versions of runc up to 1.1.11, a critical component utilized by Docker and other containerization technologies like Kubernetes. This vulnerability enables an attacker to escape from a container to the underlying host operating system. Put on your red team hat to exploit this vulnerability.
![](https://cdn.prod.website-files.com/63eef15e3ff8fd318e9a6888/6422fa83dbda4c850389c7bb_Group%20170.webp)
Course Content
CVE-2024-21626 is a severe vulnerability affecting all versions of runc up to 1.1.11, a critical component utilized by Docker and other containerization technologies like Kubernetes. This vulnerability enables an attacker to escape from a container to the underlying host operating system. Exploitation can occur either through executing a malicious image or building an image using a compromised Dockerfile or base image. Specifically, the vulnerability exploits the order of operations related to the WORKDIR directive in Dockerfiles, allowing an attacker to maintain access to privileged host directory file descriptors and thereby gain full access to the host's root filesystem. This potentially leads to unauthorized data access and system control, operating under the privileges of the containerization user, typically as the root user. In this course you’ll be putting on your red team hat to exploit this vulnerability.
Target Audience
This course is for seasoned red teamers, penetration testers, security and vulnerability assessment analysts, and system administrators who want to know how to exploit and protect against the latest vulnerabilities impacting enterprise systems.
Course Level
Intermediate
Prerequisites
Basic knowledge of Docker as well as functional knowledge of the Linux command line.