Read the docs
TI-2024-09825 Aliases CVE-2024-10603GHSA-98hx-vmw6-46w7

Weaknesses in the generation of TCP/UDP source ports and some other header values in…

Priority LOW 28CWE-340Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
Present
Impact type
—
Confidentiality · integrity · availability
Low · Low · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

Weaknesses in the generation of TCP/UDP source ports and some other header values in Google's gVisor allowed them to be predicted by an external attacker in some circumstances.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00275 20th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed gVisor (Google): release-20241028.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
GooglegVisor—release-20241028.0Patch availableCNA
  • gVisor VendorGoogle Affected — Fixed in release-20241028.0 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:google:gvisor:*:*:*:*:*:*:*:*before 20231030.0VulnerableGoogle
cpe:2.3:a:google:gvisor:20231106.0:*:*:*:*:*:*:*20231106.0VulnerableGoogle
  • cpe:2.3:a:google:gvisor:*:*:*:*:*:*:*:* Versions before 20231030.0 Vulnerable ·Google
  • cpe:2.3:a:google:gvisor:20231106.0:*:*:*:*:*:*:* Versions 20231106.0 Vulnerable ·Google

Remediation

  • Fix · CNA gVisor (Google) Fixed in release-20241028.0

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-10603
  2. 2026-10-03 Alias added: GHSA-98hx-vmw6-46w7

References

Exploit 1

Patch 3

  • TI-2018-13698 pkg/sentry/kernel/shm/shm.go in Google gVisor before 2018-11-01 allows attackers to… CVSS 3.0CRITICAL 9.8
  • TI-2018-11721 Google gVisor before 2018-08-23, within the seccomp sandbox, permits access to the… CVSS 3.0MEDIUM 6.8
  • TI-2025-02373 Improper File Permission Handling in Google gVisor runsc CVSS 4.0MEDIUM 6.8
  • TI-2023-06639 Denial-of-Service in Gvisor CVSS 3.1MEDIUM 6.5
  • TI-2024-09306 Improved Seeding and Hashing In gVisor CVSS 4.0MEDIUM 6.3
  • TI-2018-14290 Google gVisor before 2018-08-22 reuses a pagetable in a different level with the… CVSS 3.0MEDIUM 5.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences