runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit this, an attacker must be able to spawn two containers with custom volume-mount configurations, and be able to run custom images. (This vulnerability does not affect Docker due to an implementation detail that happens to block the attack.)
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade critUpgrade toolboxUpgrade udicaUpgrade criuUpgrade python3-criuUpgrade python-podman-apiUpgrade slirp4netns | May 13, 2022 | Feb 12, 2020 |
| Alpine Linux | — | Upgrade runcUpgrade containerd | Aug 22, 2024 | Feb 12, 2020 |
| Amazon Linux Ami 2 | — | Upgrade runcUpgrade runc-debuginfo | Jul 4, 2022 | Feb 12, 2020 |
| Amazon_linux | — | Upgrade runc | Apr 24, 2020 | Feb 12, 2020 |
| Centos_linux | — | Upgrade container-selinuxUpgrade skopeo-testsUpgrade skopeo-debuginfoUpgrade containernetworking-pluginsUpgrade critUpgrade python-podman-apiUpgrade podman-remoteUpgrade runc-debuginfoUpgrade slirp4netns-debuginfoUpgrade udicaUpgrade podman-debuginfoUpgrade runc-debugsourceUpgrade slirp4netns-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade cockpit-podmanUpgrade runcUpgrade python3-criuUpgrade criu-debugsourceUpgrade podman-debugsourceUpgrade podman-dockerUpgrade buildah-testsUpgrade toolboxUpgrade podman-remote-debuginfoUpgrade criuUpgrade skopeo-debugsourceUpgrade buildahUpgrade conmonUpgrade skopeoUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade podman-testsUpgrade buildah-tests-debuginfoUpgrade slirp4netnsUpgrade fuse-overlayfsUpgrade criu-debuginfoUpgrade buildah-debuginfoUpgrade podmanUpgrade containers-commonUpgrade buildah-debugsource | Mar 24, 2020 | Feb 12, 2020 |
| Debian | — | Upgrade runc | Mar 29, 2023 | Feb 12, 2020 |
| Gentoo Linux | — | Upgrade app-emulation/runc. | Mar 16, 2020 | Feb 12, 2020 |
| Huawei Euleros 2_0_sp10 | — | Upgrade docker-engine | Jul 18, 2023 | Feb 12, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade docker-runc | May 25, 2022 | Feb 12, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade docker-engine-selinuxUpgrade docker-engine | Apr 26, 2022 | Feb 12, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade docker-engine | Apr 26, 2022 | Feb 12, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade docker-runc | Aug 9, 2023 | Feb 12, 2020 |
| Oracle_linux | — | Upgrade buildah-testsUpgrade criuUpgrade podmanUpgrade cockpit-podmanUpgrade buildahUpgrade fuse-overlayfsUpgrade podman-dockerUpgrade skopeoUpgrade conmonUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade runcUpgrade container-selinuxUpgrade critUpgrade python3-criuUpgrade containers-commonUpgrade udicaUpgrade podman-testsUpgrade skopeo-testsUpgrade slirp4netnsUpgrade python-podman-api | Jul 22, 2024 | Dec 21, 2019 |
| Redhat Openshift | — | Upgrade runc | Mar 11, 2020 | Dec 21, 2019 |
| Redhat_linux | — | Upgrade conmonUpgrade critUpgrade slirp4netns-debugsourceUpgrade buildah-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade udicaUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade runc-debuginfoUpgrade podman-dockerUpgrade skopeoUpgrade slirp4netns-debuginfoUpgrade slirp4netnsUpgrade container-selinuxNo solution existsUpgrade podman-testsUpgrade cockpit-podmanUpgrade runcUpgrade toolboxUpgrade podman-debugsourceUpgrade skopeo-testsUpgrade skopeo-debuginfoUpgrade podmanUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfsUpgrade criu-debuginfoUpgrade containers-commonUpgrade python3-criuUpgrade skopeo-debugsourceUpgrade runc-debugsourceUpgrade criuUpgrade podman-remoteUpgrade buildah-testsUpgrade buildahUpgrade python-podman-apiUpgrade containernetworking-pluginsUpgrade criu-debugsourceUpgrade podman-debuginfoUpgrade buildah-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade podman-remote-debuginfo | Mar 24, 2020 | Feb 12, 2020 |
| Rocky_linux | — | Upgrade criu-debugsourceUpgrade criuUpgrade critUpgrade runcUpgrade slirp4netnsUpgrade runc-debugsourceUpgrade criu-debuginfoUpgrade runc-debuginfoUpgrade slirp4netns-debuginfoUpgrade python3-criuUpgrade slirp4netns-debugsource | Mar 12, 2024 | Feb 12, 2020 |
| Suse | — | Upgrade containerdUpgrade runcUpgrade docker-runcUpgrade docker | Feb 16, 2020 | Feb 12, 2020 |
| Ubuntu | — | Upgrade runcUpgrade runc (Ubuntu Pro) | Mar 10, 2020 | Feb 12, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 12, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub