{"document":{"aggregate_severity":{"namespace":"https://www.suse.com/support/security/rating/","text":"critical"},"category":"csaf_vex","csaf_version":"2.0","distribution":{"text":"Copyright 2024 SUSE LLC. All rights reserved.","tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en","notes":[{"category":"summary","text":"SUSE CVE-2024-22036","title":"Title"},{"category":"description","text":"A vulnerability has been identified within Rancher where a cluster or node driver can be used to escape the chroot\n jail and gain root access to the Rancher container itself. In \nproduction environments, further privilege escalation is possible based \non living off the land within the Rancher container itself. For the test\n and development environments, based on a -privileged Docker container, \nit is possible to escape the Docker container and gain execution access \non the host system.\n\n\nThis issue affects rancher: from 2.7.0 before 2.7.16, from 2.8.0 before 2.8.9, from 2.9.0 before 2.9.3.","title":"Description of the CVE"},{"category":"legal_disclaimer","text":"CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).","title":"Terms of use"}],"publisher":{"category":"vendor","contact_details":"https://www.suse.com/support/security/contact/","name":"SUSE Product Security Team","namespace":"https://www.suse.com/"},"references":[{"category":"external","summary":"CVE-2024-22036","url":"https://www.suse.com/security/cve/CVE-2024-22036"},{"category":"external","summary":"SUSE Security Ratings","url":"https://www.suse.com/support/security/rating/"},{"category":"external","summary":"SUSE Bug 1231280 for CVE-2024-22036","url":"https://bugzilla.suse.com/1231280"},{"category":"external","summary":"Advisory link for GHSA-h99m-6755-rgwc","url":"https://github.com/rancher/rancher/security/advisories/GHSA-h99m-6755-rgwc"},{"category":"external","summary":"Advisory link for SUSE-SU-2024:3911-1","url":"https://lists.suse.com/pipermail/sle-security-updates/2024-November/019776.html"},{"category":"external","summary":"Advisory link for openSUSE-SU-2024:0350-1","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3GBL6IN35EDC2YQIKBPTX7XQQ67KRPAM/"},{"category":"external","summary":"Advisory link for openSUSE-SU-2024:14447-1","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XTEQAM75LF5DZCFX3MOH4IT3DWP5ZTL6/"}],"title":"SUSE CVE CVE-2024-22036","tracking":{"current_release_date":"2026-03-13T14:49:39Z","generator":{"date":"2025-09-12T23:36:09Z","engine":{"name":"cve-database.git:bin/generate-csaf-vex.pl","version":"1"}},"id":"CVE-2024-22036","initial_release_date":"2025-09-12T23:36:09Z","revision_history":[{"date":"2025-09-12T23:36:09Z","number":"2","summary":"Current version"},{"date":"2025-11-03T02:11:28Z","number":"3","summary":"Current version"},{"date":"2025-12-17T01:01:39Z","number":"4","summary":"description changed"},{"date":"2025-12-19T01:10:21Z","number":"5","summary":"description changed"},{"date":"2026-01-16T00:47:00Z","number":"6","summary":"unknown changes"},{"date":"2026-03-12T09:01:32Z","number":"7","summary":"unknown changes"},{"date":"2026-03-13T14:49:39Z","number":"8","summary":"unknown changes"}],"status":"interim","version":"8"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_name","name":"SUSE Linux Enterprise Server 16.0","product":{"name":"SUSE Linux Enterprise Server 16.0","product_id":"SUSE Linux Enterprise Server 16.0","product_identification_helper":{"cpe":"cpe:/o:suse:sles:16:16.0:server"}}},{"category":"product_name","name":"openSUSE Tumbleweed","product":{"name":"openSUSE Tumbleweed","product_id":"openSUSE Tumbleweed","product_identification_helper":{"cpe":"cpe:/o:opensuse:tumbleweed"}}},{"category":"product_version","name":"govulncheck-vulndb-0.0.20241030T212825-1.1","product":{"name":"govulncheck-vulndb-0.0.20241030T212825-1.1","product_id":"govulncheck-vulndb-0.0.20241030T212825-1.1","product_identification_helper":{"purl":"pkg:rpm/suse/govulncheck-vulndb@0.0.20241030T212825-1.1?upstream=govulncheck-vulndb-0.0.20241030T212825-1.1.src.rpm"}}},{"category":"product_version","name":"govulncheck-vulndb-0.0.20250814T182633-160000.1.2","product":{"name":"govulncheck-vulndb-0.0.20250814T182633-160000.1.2","product_id":"govulncheck-vulndb-0.0.20250814T182633-160000.1.2","product_identification_helper":{"purl":"pkg:rpm/suse/govulncheck-vulndb@0.0.20250814T182633-160000.1.2?upstream=govulncheck-vulndb-0.0.20250814T182633-160000.1.2.src.rpm"}}}],"category":"product_family","name":"SUSE Linux Enterprise"}],"category":"vendor","name":"SUSE"}],"relationships":[{"category":"default_component_of","full_product_name":{"name":"govulncheck-vulndb-0.0.20250814T182633-160000.1.2 as component of SUSE Linux Enterprise Server 16.0","product_id":"SUSE Linux Enterprise Server 16.0:govulncheck-vulndb-0.0.20250814T182633-160000.1.2"},"product_reference":"govulncheck-vulndb-0.0.20250814T182633-160000.1.2","relates_to_product_reference":"SUSE Linux Enterprise Server 16.0"},{"category":"default_component_of","full_product_name":{"name":"govulncheck-vulndb-0.0.20241030T212825-1.1 as component of openSUSE Tumbleweed","product_id":"openSUSE Tumbleweed:govulncheck-vulndb-0.0.20241030T212825-1.1"},"product_reference":"govulncheck-vulndb-0.0.20241030T212825-1.1","relates_to_product_reference":"openSUSE Tumbleweed"}]},"vulnerabilities":[{"cve":"CVE-2024-22036","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2024-22036"}],"notes":[{"category":"general","text":"A vulnerability has been identified within Rancher where a cluster or node driver can be used to escape the chroot\n jail and gain root access to the Rancher container itself. In \nproduction environments, further privilege escalation is possible based \non living off the land within the Rancher container itself. For the test\n and development environments, based on a -privileged Docker container, \nit is possible to escape the Docker container and gain execution access \non the host system.\n\n\nThis issue affects rancher: from 2.7.0 before 2.7.16, from 2.8.0 before 2.8.9, from 2.9.0 before 2.9.3.","title":"CVE description"}],"product_status":{"recommended":["SUSE Linux Enterprise Server 16.0:govulncheck-vulndb-0.0.20250814T182633-160000.1.2","openSUSE Tumbleweed:govulncheck-vulndb-0.0.20241030T212825-1.1"]},"references":[{"category":"external","summary":"CVE-2024-22036","url":"https://www.suse.com/security/cve/CVE-2024-22036"},{"category":"external","summary":"SUSE Security Ratings","url":"https://www.suse.com/support/security/rating/"},{"category":"external","summary":"SUSE Bug 1231280 for CVE-2024-22036","url":"https://bugzilla.suse.com/1231280"},{"category":"external","summary":"Advisory link for GHSA-h99m-6755-rgwc","url":"https://github.com/rancher/rancher/security/advisories/GHSA-h99m-6755-rgwc"},{"category":"external","summary":"Advisory link for SUSE-SU-2024:3911-1","url":"https://lists.suse.com/pipermail/sle-security-updates/2024-November/019776.html"},{"category":"external","summary":"Advisory link for openSUSE-SU-2024:0350-1","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3GBL6IN35EDC2YQIKBPTX7XQQ67KRPAM/"},{"category":"external","summary":"Advisory link for openSUSE-SU-2024:14447-1","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XTEQAM75LF5DZCFX3MOH4IT3DWP5ZTL6/"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Server 16.0:govulncheck-vulndb-0.0.20250814T182633-160000.1.2","openSUSE Tumbleweed:govulncheck-vulndb-0.0.20241030T212825-1.1"]}],"threats":[{"category":"impact","date":"2024-10-03T16:45:11Z","details":"critical"}],"title":"CVE-2024-22036"}]}