The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to /proc/self/exe.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade oci-systemd-hookUpgrade oci-umount | May 13, 2022 | Feb 11, 2019 |
| Alpine Linux | — | Upgrade flatpakUpgrade lxcUpgrade runc | Aug 22, 2024 | Feb 11, 2019 |
| Amazon_linux | — | Upgrade docker | Feb 12, 2019 | Feb 8, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 11, 2019 |
| Centos_linux | — | Upgrade fuse-overlayfs-debugsourceUpgrade skopeo-debugsourceUpgrade fuse-overlayfsUpgrade buildahUpgrade oci-systemd-hook-debugsourceUpgrade slirp4netnsUpgrade docker-debuginfoUpgrade runcUpgrade podman-dockerUpgrade oci-systemd-hookUpgrade oci-umount-debugsourceUpgrade oci-umount-debuginfoUpgrade container-selinuxUpgrade buildah-debuginfoUpgrade docker-logrotateUpgrade runc-debugsourceUpgrade podman-debuginfoUpgrade skopeo-debuginfoUpgrade oci-systemd-hook-debuginfoUpgrade docker-clientUpgrade containernetworking-plugins-debuginfoUpgrade runc-debuginfoUpgrade slirp4netns-debuginfoUpgrade docker-rhel-push-pluginUpgrade buildah-debugsourceUpgrade oci-umountUpgrade skopeoUpgrade dockerUpgrade containers-commonUpgrade slirp4netns-debugsourceUpgrade podmanUpgrade docker-v1.10-migratorUpgrade docker-novolume-pluginUpgrade containernetworking-plugins-debugsourceUpgrade docker-lvm-pluginUpgrade containernetworking-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade docker-commonUpgrade podman-debugsource | Aug 28, 2019 | Feb 11, 2019 |
| Debian | — | Upgrade lxcUpgrade runc | Jul 30, 2024 | Feb 11, 2019 |
| Docker | — | Upgrade to Docker v18.09.2 | Feb 12, 2019 | Feb 12, 2019 |
| Docker_ee | — | Upgrade Docker EE to version 18.09.2 | Nov 25, 2019 | Feb 11, 2019 |
| Gentoo Linux | — | Upgrade app-emulation/runc. | Mar 16, 2020 | Feb 11, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade docker-engine | Feb 22, 2019 | Feb 11, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade docker-engine | Mar 11, 2019 | Feb 11, 2019 |
| Oracle_linux | — | Upgrade podmanUpgrade podman-dockerUpgrade fuse-overlayfsUpgrade slirp4netnsUpgrade skopeoUpgrade oci-umountUpgrade container-selinuxUpgrade containers-commonUpgrade oci-systemd-hookUpgrade runcUpgrade buildahUpgrade containernetworking-pluginsUpgrade docker-engine | Feb 12, 2019 | Feb 11, 2019 |
| Redhat Openshift | — | Upgrade docker | Feb 27, 2019 | Feb 11, 2019 |
| Redhat_linux | — | No solution existsUpgrade podmanUpgrade podman-dockerUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfsUpgrade podman-debuginfoUpgrade skopeo-debugsourceUpgrade skopeo-debuginfoUpgrade buildah-debuginfoUpgrade buildahUpgrade oci-systemd-hook-debuginfoUpgrade oci-systemd-hook-debugsourceUpgrade oci-umountUpgrade skopeoUpgrade runcUpgrade runc-debugsourceUpgrade slirp4netnsUpgrade runc-debuginfoUpgrade containers-commonUpgrade containernetworking-plugins-debuginfoUpgrade container-selinuxUpgrade oci-systemd-hookUpgrade buildah-debugsourceUpgrade slirp4netns-debuginfoUpgrade podman-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-pluginsUpgrade oci-umount-debuginfoUpgrade oci-umount-debugsourceUpgrade slirp4netns-debugsource | Feb 12, 2019 | Feb 11, 2019 |
| Rocky_linux | — | Upgrade oci-umount-debugsourceUpgrade oci-systemd-hookUpgrade oci-umountUpgrade oci-systemd-hook-debugsourceUpgrade oci-umount-debuginfoUpgrade oci-systemd-hook-debuginfo | Mar 12, 2024 | Feb 11, 2019 |
| Suse | — | Upgrade runcUpgrade docker-runcUpgrade pam_cgfsUpgrade lxcUpgrade go-raceUpgrade system-user-flatpakUpgrade docker-testUpgrade go1.11-raceUpgrade libflatpak0Upgrade docker-zsh-completionUpgrade docker-libnetworkUpgrade flatpak-develUpgrade go1.12Upgrade flatpak-zsh-completionUpgrade containerd-testUpgrade lxc-bash-completionUpgrade typelib-1_0-flatpak-1_0Upgrade go1.12-raceUpgrade liblxc1Upgrade go-docUpgrade golang-github-docker-libnetworkUpgrade go1.12-docUpgrade liblxc-develUpgrade go1.11Upgrade dockerUpgrade go1.11-docUpgrade containerdUpgrade docker-bash-completionUpgrade goUpgrade containerd-ctrUpgrade lxcfs-hooks-lxcUpgrade docker-runc-testUpgrade flatpakUpgrade lxcfsUpgrade runc-test | Feb 20, 2019 | Feb 11, 2019 |
| Ubuntu | — | Upgrade docker.io | Jul 9, 2019 | Feb 11, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 11, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub