CVE-2024-56330

CVSS V2 None CVSS V3 None

Description

Stardust is a platform for streaming isolated desktop containers. With this exploit, inter container communication (ICC) is not disabled. This would allow users within a container to access another containers agent, therefore compromising access.The problem has been patched in any Stardust build past 12/20/24. Users are advised to upgrade. Users may also manually disable ICC if they are unable to upgrade.

Overview

CVE ID
CVE-2024-56330

Assigner
GitHub_M

Vulnerability Status
PUBLISHED

Published Version
2024-12-20T20:01:48.624Z

Last Modified Date
2024-12-20T20:01:48.624Z

Weakness Enumerations

CWE	URL
CWE-284	http://cwe.mitre.org/data/definitions/284.html

References

Reference URL	Reference Tags
https://github.com/spaceness/stardust/security/advisories/GHSA-h2c9-7j2r-m98p	x_refsource_CONFIRM

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-56330
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56330

History

Created	Old Value	New Value	Data Type	Notes
2024-12-21 13:06:38				Added to TrackCVE