runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit this, an attacker must be able to spawn two containers with custom volume-mount configurations, and be able to run custom images. (This vulnerability does not affect Docker due to an implementation detail that happens to block the attack.)
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade critUpgrade toolboxUpgrade criuUpgrade udicaUpgrade slirp4netnsUpgrade python3-criuUpgrade python-podman-api | May 13, 2022 | Feb 12, 2020 |
| Alpine Linux | — | Upgrade containerdUpgrade runc | Aug 22, 2024 | Feb 12, 2020 |
| Amazon Linux Ami 2 | — | Upgrade runc-debuginfoUpgrade runc | Jul 4, 2022 | Feb 12, 2020 |
| Amazon_linux | — | Upgrade runc | Apr 24, 2020 | Feb 12, 2020 |
| Centos_linux | — | Upgrade podman-testsUpgrade criuUpgrade fuse-overlayfs-debugsourceUpgrade podman-remote-debuginfoUpgrade toolboxUpgrade criu-debuginfoUpgrade skopeoUpgrade buildahUpgrade fuse-overlayfs-debuginfoUpgrade slirp4netnsUpgrade buildah-debugsourceUpgrade podmanUpgrade conmonUpgrade fuse-overlayfsUpgrade containers-commonUpgrade skopeo-debugsourceUpgrade buildah-tests-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade buildah-debuginfoUpgrade runcUpgrade skopeo-debuginfoUpgrade slirp4netns-debugsourceUpgrade python3-criuUpgrade containernetworking-pluginsUpgrade containernetworking-plugins-debuginfoUpgrade buildah-testsUpgrade container-selinuxUpgrade podman-debugsourceUpgrade podman-remoteUpgrade podman-dockerUpgrade cockpit-podmanUpgrade podman-debuginfoUpgrade criu-debugsourceUpgrade udicaUpgrade skopeo-testsUpgrade runc-debuginfoUpgrade slirp4netns-debuginfoUpgrade python-podman-apiUpgrade runc-debugsourceUpgrade crit | Mar 24, 2020 | Feb 12, 2020 |
| Debian | — | Upgrade runc | Mar 29, 2023 | Feb 12, 2020 |
| Gentoo Linux | — | Upgrade app-emulation/runc. | Mar 16, 2020 | Feb 12, 2020 |
| Huawei Euleros 2_0_sp10 | — | Upgrade docker-engine | Jul 18, 2023 | Feb 12, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade docker-runc | May 25, 2022 | Feb 12, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade docker-engine-selinuxUpgrade docker-engine | Apr 26, 2022 | Feb 12, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade docker-engine | Apr 26, 2022 | Feb 12, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade docker-runc | Aug 9, 2023 | Feb 12, 2020 |
| Oracle_linux | — | Upgrade fuse-overlayfsUpgrade containernetworking-pluginsUpgrade cockpit-podmanUpgrade buildahUpgrade conmonUpgrade skopeoUpgrade podman-dockerUpgrade buildah-testsUpgrade podmanUpgrade criuUpgrade containers-commonUpgrade udicaUpgrade podman-testsUpgrade runcUpgrade podman-remoteUpgrade skopeo-testsUpgrade python3-criuUpgrade python-podman-apiUpgrade slirp4netnsUpgrade container-selinuxUpgrade crit | Jul 22, 2024 | Dec 21, 2019 |
| Redhat Openshift | — | Upgrade runc | Mar 11, 2020 | Dec 21, 2019 |
| Redhat_linux | — | Upgrade fuse-overlayfs-debugsourceUpgrade buildah-debuginfoUpgrade podman-remoteUpgrade buildah-testsUpgrade criu-debuginfoUpgrade podman-remote-debuginfoUpgrade containers-commonUpgrade python3-criuUpgrade criu-debugsourceUpgrade fuse-overlayfsUpgrade python-podman-apiUpgrade buildahUpgrade containernetworking-pluginsUpgrade skopeo-debugsourceUpgrade criuUpgrade buildah-tests-debuginfoUpgrade podman-debuginfoUpgrade runc-debugsourceUpgrade skopeo-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade conmonUpgrade critUpgrade podman-dockerUpgrade podmanUpgrade skopeo-testsUpgrade slirp4netnsUpgrade podman-testsUpgrade runc-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade toolboxUpgrade slirp4netns-debuginfoUpgrade podman-debugsourceNo solution existsUpgrade container-selinuxUpgrade cockpit-podmanUpgrade udicaUpgrade buildah-debugsourceUpgrade skopeoUpgrade runcUpgrade slirp4netns-debugsource | Mar 24, 2020 | Feb 12, 2020 |
| Rocky_linux | — | Upgrade slirp4netnsUpgrade critUpgrade runc-debugsourceUpgrade criuUpgrade runcUpgrade criu-debuginfoUpgrade criu-debugsourceUpgrade python3-criuUpgrade runc-debuginfoUpgrade slirp4netns-debugsourceUpgrade slirp4netns-debuginfo | Mar 12, 2024 | Feb 12, 2020 |
| Suse | — | Upgrade runcUpgrade containerdUpgrade docker-runcUpgrade docker | Feb 16, 2020 | Feb 12, 2020 |
| Ubuntu | — | Upgrade runc (Ubuntu Pro)Upgrade runc | Mar 10, 2020 | Feb 12, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 12, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub