Описание
runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount targets, and thus a malicious Docker image can mount over a /proc directory.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 1.0.0~rc10-0ubuntu1~18.04.2 |
| devel | released | 1.0.0~rc8+git20190923.3e425f80-0ubuntu1 |
| disco | ignored | end of life |
| eoan | released | 1.0.0~rc8+git20190923.3e425f80-0ubuntu1 |
| esm-apps/bionic | released | 1.0.0~rc10-0ubuntu1~18.04.2 |
| esm-apps/xenial | released | 1.0.0~rc7+git20190403.029124da-0ubuntu1~16.04.4+esm2 |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | not-affected | 1.0.0~rc8+git20190923.3e425f80-0ubuntu1 |
| focal | released | 1.0.0~rc8+git20190923.3e425f80-0ubuntu1 |
| groovy | released | 1.0.0~rc8+git20190923.3e425f80-0ubuntu1 |
Показывать по
EPSS
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount targets, and thus a malicious Docker image can mount over a /proc directory.
runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount targets, and thus a malicious Docker image can mount over a /proc directory.
runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other ...
Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork
EPSS
5 Medium
CVSS2
7.5 High
CVSS3