Unknown · Containers/Common · CVE-2024-9341
**Name of the Vulnerable Software and Affected Versions**
containers/common versions (affected versions not specified)
**Description**
The issue is related to a flaw in the containers/common Go library, which incorrectly handles certain file paths when FIPS mode is enabled on a system. This allows an attacker to exploit symbolic links, tricking the system into mounting sensitive host directories inside a container and accessing critical host files, thus bypassing the intended isolation between containers and the host system.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.