Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2020:0219-1

Опубликовано: 13 фев. 2020
Источник: suse-cvrf

Описание

Security update for docker-runc

This update for docker-runc fixes the following issues:

  • CVE-2019-19921: Fixed a volume mount race condition with shared mounts (bsc#1160452).

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.1
docker-runc-1.0.0rc8+gitr3917_3e425f80a8c9-lp151.3.15.1

Ссылки

Описание

runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit this, an attacker must be able to spawn two containers with custom volume-mount configurations, and be able to run custom images. (This vulnerability does not affect Docker due to an implementation detail that happens to block the attack.)

Затронутые продукты
openSUSE Leap 15.1:docker-runc-1.0.0rc8+gitr3917_3e425f80a8c9-lp151.3.15.1
Ссылки
Уязвимость openSUSE-SU-2020:0219-1