| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/opencontainers/runc | < 1.0.0-rc8.0.20190930145003-cad42f6e0932 | 1.0.0-rc8.0.20190930145003-cad42f6e0932 |
| github.com/opencontainers/selinux | < 1.3.1-0.20190929122143-5215b1806f52 | 1.3.1-0.20190929122143-5215b1806f52 |
| docker | ≤ 19.03.2 | |
| runc | = 1.0.0≥ 0.0.1, ≤ 0.1.1 | |
| openshift container platform | = 4.1= 4.2 |
runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount targets, and thus a malicious Docker image can mount over a /proc directory.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free