| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/moby/moby | ≥ 20.10.0-beta1, < 20.10.3< 19.3.15 | 20.10.319.3.15 |
| docker | ≥ 20.0.0, < 20.10.3< 19.03.15 | 20.10.319.03.15 |
| e-series santricity os controller | ≥ 11.0.0, ≤ 11.60.3 |
When using --userns-remap, if the root user in the remapped namespace has access to the host filesystem they can modify files under /var/lib/docker/<remapping> that cause writing files with extended privileges.
Versions 20.10.3 and 19.03.15 contain patches that prevent privilege escalation from remapped user.
Maintainers would like to thank Alex Chapman for discovering the vulnerability; @awprice, @nathanburrell, @raulgomis, @chris-walz, @erin-jensby, @bassmatt, @mark-adams, @dbaxa for working on it and Zac Ellis for responsibly disclosing it to [email protected]
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free