runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit this, an attacker must be able to spawn two containers with custom volume-mount configurations, and be able to run custom images. (This vulnerability does not affect Docker due to an implementation detail that happens to block the attack.)
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade criuUpgrade toolboxUpgrade udicaUpgrade critUpgrade slirp4netnsUpgrade python3-criuUpgrade python-podman-api | May 13, 2022 | Feb 12, 2020 |
| Alpine Linux | — | Upgrade runcUpgrade containerd | Aug 22, 2024 | Feb 12, 2020 |
| Amazon Linux Ami 2 | — | Upgrade runc-debuginfoUpgrade runc | Jul 4, 2022 | Feb 12, 2020 |
| Amazon_linux | — | Upgrade runc | Apr 24, 2020 | Feb 12, 2020 |
| Centos_linux | — | Upgrade podmanUpgrade buildah-tests-debuginfoUpgrade podman-remote-debuginfoUpgrade buildah-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podman-testsUpgrade conmonUpgrade skopeoUpgrade buildah-debugsourceUpgrade criu-debuginfoUpgrade criuUpgrade slirp4netnsUpgrade skopeo-debugsourceUpgrade toolboxUpgrade containers-commonUpgrade fuse-overlayfsUpgrade buildahUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade runcUpgrade runc-debuginfoUpgrade udicaUpgrade python3-criuUpgrade container-selinuxUpgrade containernetworking-pluginsUpgrade buildah-testsUpgrade skopeo-testsUpgrade critUpgrade criu-debugsourceUpgrade podman-debugsourceUpgrade cockpit-podmanUpgrade slirp4netns-debugsourceUpgrade runc-debugsourceUpgrade podman-debuginfoUpgrade slirp4netns-debuginfoUpgrade skopeo-debuginfoUpgrade python-podman-apiUpgrade podman-remoteUpgrade containernetworking-plugins-debuginfoUpgrade podman-docker | Mar 24, 2020 | Feb 12, 2020 |
| Debian | — | Upgrade runc | Mar 29, 2023 | Feb 12, 2020 |
| Gentoo Linux | — | Upgrade app-emulation/runc. | Mar 16, 2020 | Feb 12, 2020 |
| Huawei Euleros 2_0_sp10 | — | Upgrade docker-engine | Jul 18, 2023 | Feb 12, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade docker-runc | May 25, 2022 | Feb 12, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade docker-engineUpgrade docker-engine-selinux | Apr 26, 2022 | Feb 12, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade docker-engine | Apr 26, 2022 | Feb 12, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade docker-runc | Aug 9, 2023 | Feb 12, 2020 |
| Oracle_linux | — | Upgrade skopeoUpgrade podmanUpgrade podman-dockerUpgrade conmonUpgrade cockpit-podmanUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade buildahUpgrade criuUpgrade containernetworking-pluginsUpgrade container-selinuxUpgrade slirp4netnsUpgrade containers-commonUpgrade runcUpgrade critUpgrade python3-criuUpgrade podman-remoteUpgrade python-podman-apiUpgrade skopeo-testsUpgrade podman-testsUpgrade udica | Jul 22, 2024 | Dec 21, 2019 |
| Redhat Openshift | — | Upgrade runc | Mar 11, 2020 | Dec 21, 2019 |
| Redhat_linux | — | Upgrade runcUpgrade runc-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade toolboxUpgrade cockpit-podmanUpgrade fuse-overlayfs-debuginfoUpgrade podman-debugsourceUpgrade slirp4netnsUpgrade podman-testsUpgrade slirp4netns-debuginfoUpgrade podman-dockerUpgrade skopeo-debuginfoUpgrade skopeo-testsUpgrade podmanUpgrade container-selinuxUpgrade skopeoUpgrade slirp4netns-debugsourceUpgrade buildah-debugsourceNo solution existsUpgrade udicaUpgrade containernetworking-plugins-debugsourceUpgrade critUpgrade conmonUpgrade buildahUpgrade containernetworking-pluginsUpgrade python3-criuUpgrade criu-debuginfoUpgrade runc-debugsourceUpgrade fuse-overlayfsUpgrade python-podman-apiUpgrade buildah-debuginfoUpgrade podman-remoteUpgrade podman-debuginfoUpgrade buildah-tests-debuginfoUpgrade skopeo-debugsourceUpgrade criuUpgrade podman-remote-debuginfoUpgrade criu-debugsourceUpgrade buildah-testsUpgrade fuse-overlayfs-debugsourceUpgrade containers-common | Mar 24, 2020 | Feb 12, 2020 |
| Rocky_linux | — | Upgrade slirp4netns-debuginfoUpgrade slirp4netns-debugsourceUpgrade runc-debuginfoUpgrade python3-criuUpgrade criuUpgrade criu-debugsourceUpgrade critUpgrade runcUpgrade criu-debuginfoUpgrade slirp4netnsUpgrade runc-debugsource | Mar 12, 2024 | Feb 12, 2020 |
| Suse | — | Upgrade containerdUpgrade runcUpgrade docker-runcUpgrade docker | Feb 16, 2020 | Feb 12, 2020 |
| Ubuntu | — | Upgrade runc (Ubuntu Pro)Upgrade runc | Mar 10, 2020 | Feb 12, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 12, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub