Skip to content
VulniPulse
Advisory severityLow3.6NetApp

Low [CVE-2024-45310] runc Vulnerability in NetApp Products

This low-severity NetApp advisory covers CVE-2024-45310 affecting Astra Control Center, NetApp HCI Compute Node (Bootstrap OS).

Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.

NTAP-20250221-0008 Source published Source updated

VulniPulse record published

Affected products & platforms
NetAppElement SoftwareTrident / Astra
Open source advisory

Android app · Google Play

Monitor future NetApp CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery

Summary

Multiple NetApp products incorporate the runc library. runc versions through 1.1.13 and through 1.2.0-rc.2 are susceptible to a vulnerability which when exploited could lead to addition or modification of data. Successful exploitation of this vulnerability could lead to addition or modification of data.

Affected products: Astra Control Center, NetApp HCI Compute Node (Bootstrap OS). NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status.

NetApp states there is no workaround available at this time.

Affected versions
  • 1.1.13
  • 1.2.0

Official advisory · high-confidence parse· fetched 2 days ago·verify at source

Fixed versions

No fixed release is recorded yet. That does not prove no patch exists — confirm against the vendor advisory.

Official advisory · high-confidence parse· fetched 2 days ago·verify at source

Mitigation checklist

Recommended fix / mitigation
  • NetApp HCI Compute Node (Bootstrap OS) has no planned fix; migrate to a supported release or product and consult NetApp's end-of-support notice.
  • Astra Control Center has no planned fix; migrate to a supported release or product and consult NetApp's end-of-support notice.

Official advisory · high-confidence parse· fetched 2 days ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

Sign in to join the discussion.