by Kastro
Paper/Archive/CVE-2024-22036

CVE-2024-22036

SUSE rancher — Rancher Remote Code Execution via Cluster/Node Drivers

EPSS 0.8%CVSS 9.1
critical.is priorityof 100
39
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 56.8.568 × 2011.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A vulnerability has been identified within Rancher where a cluster or node driver can be used to escape the chroot jail and gain root access to the Rancher container itself. In production environments, further privilege escalation is possible based on living off the land within the Rancher container itself. For the test and development environments, based on a –privileged Docker container, it is possible to escape the Docker container and gain execution access on the host system. This issue affects rancher: from 2.7.0 before 2.7.16, from 2.8.0 before 2.8.9, from 2.9.0 before 2.9.3.

Affected

ProductAffectedFixed inSource
rancher2.7.0 – < 2.7.162.7.16CNA
rancher2.8.0 – < 2.8.92.8.9CNA
rancher2.9.0 – < 2.9.32.9.3CNA

Scores by source

suse (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refbugzilla.suse.com/show_bug.cgi?id=CVE-2024-22036refgithub.com/rancher/rancher/security/advisories/GHSA-h99m-6755-rgwc