CVE-2024-10603 Information disclosure in gVisor

Medium 6.3 Published 30 Jan 2025 Updated 24 Feb 2025

Attackers can predict TCP/UDP source ports in gVisor, potentially enabling network traffic analysis or bypassing security controls.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2024-10603?

CVE-2024-10603 is a medium-severity vulnerability in Google gVisor, published on 30 Jan 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Weaknesses in the generation of TCP/UDP source ports and some other header values in Google's gVisor allowed them to be predicted by an external attacker in some circumstances.

Weakness: CWE-340

Which versions are affected by CVE-2024-10603?

It affects 1 product.

Products include Google Gvisor.

How do I fix CVE-2024-10603?

Apply the vendor's patch.

Is CVE-2024-10603 being exploited?

There is no known exploitation of CVE-2024-10603 in the wild and no public exploit code.

Sources

Also known as AZL-56195, AZL-56204, DEBIAN-CVE-2024-10603, GHSA-98hx-vmw6-46w7, UBUNTU-CVE-2024-10603.