Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2020-1252

Высокий

ALT-PU-2020-1252: package runc update to version 1.0.0-alt12.rc10

Источник
errata.altlinux.org
Дата публикации
18.02.2020
Дата обновления
04.02.2026
Устраненные уязвимости
1

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades runc to version 1.0.0-alt12.rc10.

Устраненные уязвимости1

Связанные уязвимости

CVSS3: 7
ubuntu
больше 6 лет назад

runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit this, an attacker must be able to spawn two containers with custom volume-mount configurations, and be able to run custom images. (This vulnerability does not affect Docker due to an implementation detail that happens to block the attack.)

CVSS3: 7
redhat
почти 7 лет назад

runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit this, an attacker must be able to spawn two containers with custom volume-mount configurations, and be able to run custom images. (This vulnerability does not affect Docker due to an implementation detail that happens to block the attack.)

CVSS3: 7
nvd
больше 6 лет назад

runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit this, an attacker must be able to spawn two containers with custom volume-mount configurations, and be able to run custom images. (This vulnerability does not affect Docker due to an implementation detail that happens to block the attack.)

CVSS3: 7
debian
больше 6 лет назад

runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalat ...

suse-cvrf
больше 6 лет назад

Security update for docker-runc