- 필수 기능
- 앱 내
- 서비스 관리
- 인프라스트럭처
- 애플리케이션 성능
- 디지털 경험
- 소프트웨어 제공
- 보안
- 로그 관리
- 관리
- 인프라스트럭처
- ci
- containers
- csm
- ndm
- otel_guides
- overview
- slos
- synthetics
- tests
- 워크플로
Detect exploitation of CVE-2024-21626 which abuses leaky file descriptors in runc.
This exploit is accomplished by building or running a container image where the working directory is set to /proc/self/fd/<int>
. In Docker this is specified using the WORKDIR
field. In Kubernetes the field is workingDir
. Successful exploitation results in read and write access to the host filesystem and potentially a complete container escape.
runc
version of 1.1.12 or later.Requires Agent version 7.55 or later.