Поиск уязвимостей

runc through 1.0-rc6 as used in Docker before 18.09.2 and other products allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image or (2) an existing container to which the attacker previously had write access that can be attached with docker exec. This occurs because of file-descriptor mishandling related to /proc/self/exe.

runc through 1.0-rc6, as used in Docker before 18.09.2 and other produ ...

Security update for runc

Important: container-tools:rhel8 security update

Important: container-tools:3.0 security update

Important: container-tools:2.0 security update

mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs

ELSA-2021-9329: docker-engine docker-cli security update (IMPORTANT)

ELSA-2021-9298: runc security update (IMPORTANT)

ELSA-2021-2371: container-tools:ol8 security update (IMPORTANT)

ELSA-2021-2370: container-tools:3.0 security update (IMPORTANT)

ELSA-2021-2291: container-tools:2.0 security update (IMPORTANT)

ELSA-2021-15112: docker-engine docker-cli security update (IMPORTANT)

ELSA-2021-14902: runc security update (IMPORTANT)

Уязвимость конфигурации инструмента для запуска изолированных контейнеров runc, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

Security update for lxc

Security update for docker-runc

Security update for docker-runc

Security update for docker-runc

Security update for docker-runc