The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to /proc/self/exe.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade oci-systemd-hookUpgrade oci-umount | May 13, 2022 | Feb 11, 2019 |
| Alpine Linux | — | Upgrade lxcUpgrade runcUpgrade flatpak | Aug 22, 2024 | Feb 11, 2019 |
| Amazon_linux | — | Upgrade docker | Feb 12, 2019 | Feb 8, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 11, 2019 |
| Centos_linux | — | Upgrade containernetworking-plugins-debugsourceUpgrade podmanUpgrade containernetworking-plugins-debuginfoUpgrade skopeoUpgrade containernetworking-pluginsUpgrade docker-lvm-pluginUpgrade runc-debuginfoUpgrade docker-novolume-pluginUpgrade docker-v1.10-migratorUpgrade docker-rhel-push-pluginUpgrade dockerUpgrade containers-commonUpgrade slirp4netns-debugsourceUpgrade slirp4netns-debuginfoUpgrade buildah-debugsourceUpgrade docker-commonUpgrade fuse-overlayfs-debuginfoUpgrade podman-debugsourceUpgrade oci-umountUpgrade buildahUpgrade oci-umount-debuginfoUpgrade oci-systemd-hookUpgrade docker-logrotateUpgrade container-selinuxUpgrade runc-debugsourceUpgrade podman-dockerUpgrade buildah-debuginfoUpgrade oci-systemd-hook-debugsourceUpgrade oci-systemd-hook-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade skopeo-debugsourceUpgrade docker-clientUpgrade podman-debuginfoUpgrade fuse-overlayfsUpgrade skopeo-debuginfoUpgrade oci-umount-debugsourceUpgrade docker-debuginfoUpgrade slirp4netnsUpgrade runc | Aug 28, 2019 | Feb 11, 2019 |
| Debian | — | Upgrade runcUpgrade lxc | Jul 30, 2024 | Feb 11, 2019 |
| Docker | — | Upgrade to Docker v18.09.2 | Feb 12, 2019 | Feb 12, 2019 |
| Docker_ee | — | Upgrade Docker EE to version 18.09.2 | Nov 25, 2019 | Feb 11, 2019 |
| Gentoo Linux | — | Upgrade app-emulation/runc. | Mar 16, 2020 | Feb 11, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade docker-engine | Feb 22, 2019 | Feb 11, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade docker-engine | Mar 11, 2019 | Feb 11, 2019 |
| Oracle_linux | — | Upgrade podman-dockerUpgrade podmanUpgrade slirp4netnsUpgrade oci-umountUpgrade skopeoUpgrade fuse-overlayfsUpgrade docker-engineUpgrade runcUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade buildahUpgrade container-selinuxUpgrade oci-systemd-hook | Feb 12, 2019 | Feb 11, 2019 |
| Redhat Openshift | — | Upgrade docker | Feb 27, 2019 | Feb 11, 2019 |
| Redhat_linux | — | Upgrade buildah-debugsourceUpgrade slirp4netns-debuginfoUpgrade containernetworking-pluginsUpgrade oci-umount-debuginfoUpgrade oci-systemd-hookUpgrade slirp4netns-debugsourceUpgrade containers-commonUpgrade runc-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade container-selinuxUpgrade oci-umount-debugsourceUpgrade podman-debugsourceUpgrade podmanUpgrade fuse-overlayfsUpgrade skopeo-debugsourceUpgrade fuse-overlayfs-debugsourceNo solution existsUpgrade buildah-debuginfoUpgrade oci-systemd-hook-debuginfoUpgrade oci-systemd-hook-debugsourceUpgrade slirp4netnsUpgrade podman-debuginfoUpgrade runcUpgrade podman-dockerUpgrade skopeoUpgrade runc-debugsourceUpgrade oci-umountUpgrade fuse-overlayfs-debuginfoUpgrade skopeo-debuginfoUpgrade buildah | Feb 12, 2019 | Feb 11, 2019 |
| Rocky_linux | — | Upgrade oci-umount-debugsourceUpgrade oci-systemd-hookUpgrade oci-systemd-hook-debuginfoUpgrade oci-systemd-hook-debugsourceUpgrade oci-umountUpgrade oci-umount-debuginfo | Mar 12, 2024 | Feb 11, 2019 |
| Suse | — | Upgrade docker-zsh-completionUpgrade flatpak-develUpgrade go1.12Upgrade system-user-flatpakUpgrade docker-libnetworkUpgrade go-raceUpgrade docker-runcUpgrade libflatpak0Upgrade lxcUpgrade pam_cgfsUpgrade docker-testUpgrade runcUpgrade go1.11-raceUpgrade containerd-testUpgrade dockerUpgrade lxc-bash-completionUpgrade flatpakUpgrade liblxc-develUpgrade lxcfs-hooks-lxcUpgrade containerdUpgrade go1.11-docUpgrade typelib-1_0-flatpak-1_0Upgrade go-docUpgrade go1.12-docUpgrade containerd-ctrUpgrade golang-github-docker-libnetworkUpgrade go1.12-raceUpgrade docker-bash-completionUpgrade goUpgrade go1.11Upgrade flatpak-zsh-completionUpgrade lxcfsUpgrade liblxc1Upgrade runc-testUpgrade docker-runc-test | Feb 20, 2019 | Feb 11, 2019 |
| Ubuntu | — | Upgrade docker.io | Jul 9, 2019 | Feb 11, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 11, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub