Detecting ‘Leaky Vessels’ Exploitation in Docker and Kubernetes

Summary

On January 31st 2024, Snyk announced the discovery of four vulnerabilities in Kubernetes and Docker. 

• 
  CVE-2024-21626: CVSS – High, 8.6


• 
  CVE-2024-23651: CVSS – High, 8.7


• 
  CVE-2024-23652: CVSS – Critical, 10


• 
  CVE-2024-23653: CVSS – Critical, 9.8

For Kubernetes, the vulnerabilities are specific to the runc CRI. Successful exploitation allows an attacker to escape the container and gain access to the host operating system. To exploit these vulnerabilities, an attacker will need to control the Dockerfile when …

attacker cri critical cve cvss discovery docker exploitation high january kubernetes runc snyk vulnerabilities