runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit this, an attacker must be able to spawn two containers with custom volume-mount configurations, and be able to run custom images. (This vulnerability does not affect Docker due to an implementation detail that happens to block the attack.)
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python-podman-apiUpgrade slirp4netnsUpgrade python3-criuUpgrade udicaUpgrade criuUpgrade toolboxUpgrade crit | May 13, 2022 | Feb 12, 2020 |
| Alpine Linux | — | Upgrade runcUpgrade containerd | Aug 22, 2024 | Feb 12, 2020 |
| Amazon Linux Ami 2 | — | Upgrade runc-debuginfoUpgrade runc | Jul 4, 2022 | Feb 12, 2020 |
| Amazon_linux | — | Upgrade runc | Apr 24, 2020 | Feb 12, 2020 |
| Centos_linux | — | Upgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade criuUpgrade podman-remote-debuginfoUpgrade buildah-debugsourceUpgrade toolboxUpgrade podman-testsUpgrade buildah-debuginfoUpgrade conmonUpgrade fuse-overlayfsUpgrade buildahUpgrade slirp4netnsUpgrade skopeo-debugsourceUpgrade skopeoUpgrade containers-commonUpgrade buildah-tests-debuginfoUpgrade criu-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podmanUpgrade runc-debuginfoUpgrade runc-debugsourceUpgrade podman-debuginfoUpgrade containernetworking-pluginsUpgrade slirp4netns-debuginfoUpgrade cockpit-podmanUpgrade python3-criuUpgrade container-selinuxUpgrade slirp4netns-debugsourceUpgrade buildah-testsUpgrade podman-debugsourceUpgrade podman-dockerUpgrade criu-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade podman-remoteUpgrade udicaUpgrade skopeo-debuginfoUpgrade skopeo-testsUpgrade critUpgrade python-podman-apiUpgrade runc | Mar 24, 2020 | Feb 12, 2020 |
| Debian | — | Upgrade runc | Mar 29, 2023 | Feb 12, 2020 |
| Gentoo Linux | — | Upgrade app-emulation/runc. | Mar 16, 2020 | Feb 12, 2020 |
| Huawei Euleros 2_0_sp10 | — | Upgrade docker-engine | Jul 18, 2023 | Feb 12, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade docker-runc | May 25, 2022 | Feb 12, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade docker-engineUpgrade docker-engine-selinux | Apr 26, 2022 | Feb 12, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade docker-engine | Apr 26, 2022 | Feb 12, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade docker-runc | Aug 9, 2023 | Feb 12, 2020 |
| Oracle_linux | — | Upgrade python3-criuUpgrade critUpgrade runcUpgrade slirp4netnsUpgrade udicaUpgrade skopeo-testsUpgrade containers-commonUpgrade python-podman-apiUpgrade podman-remoteUpgrade container-selinuxUpgrade podman-testsUpgrade criuUpgrade buildah-testsUpgrade containernetworking-pluginsUpgrade skopeoUpgrade conmonUpgrade fuse-overlayfsUpgrade podman-dockerUpgrade podmanUpgrade cockpit-podmanUpgrade buildah | Jul 22, 2024 | Dec 21, 2019 |
| Redhat Openshift | — | Upgrade runc | Mar 11, 2020 | Feb 12, 2020 |
| Redhat_linux | — | Upgrade criu-debuginfoUpgrade fuse-overlayfsUpgrade containernetworking-pluginsUpgrade skopeo-debugsourceUpgrade containers-commonUpgrade buildah-tests-debuginfoUpgrade criu-debugsourceUpgrade podman-debuginfoUpgrade buildah-testsUpgrade python3-criuUpgrade buildah-debuginfoUpgrade python-podman-apiUpgrade buildahUpgrade criuUpgrade podman-remoteUpgrade runc-debugsourceUpgrade podman-remote-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade runc-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade conmonUpgrade runcUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debugsourceNo solution existsUpgrade container-selinuxUpgrade cockpit-podmanUpgrade podman-testsUpgrade slirp4netnsUpgrade skopeoUpgrade slirp4netns-debuginfoUpgrade slirp4netns-debugsourceUpgrade skopeo-debuginfoUpgrade podmanUpgrade podman-debugsourceUpgrade udicaUpgrade skopeo-testsUpgrade critUpgrade toolboxUpgrade podman-dockerUpgrade containernetworking-plugins-debugsource | Mar 24, 2020 | Feb 12, 2020 |
| Rocky_linux | — | Upgrade criu-debuginfoUpgrade criu-debugsourceUpgrade slirp4netnsUpgrade critUpgrade criuUpgrade runcUpgrade runc-debugsourceUpgrade slirp4netns-debuginfoUpgrade runc-debuginfoUpgrade python3-criuUpgrade slirp4netns-debugsource | Mar 12, 2024 | Feb 12, 2020 |
| Suse | — | Upgrade containerdUpgrade docker-runcUpgrade runcUpgrade docker | Feb 16, 2020 | Feb 12, 2020 |
| Ubuntu | — | Upgrade runc (Ubuntu Pro)Upgrade runc | Mar 10, 2020 | Feb 12, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 12, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub