| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/opencontainers/runc | ≥ 1.0.0-rc95, < 1.1.5 | 1.1.5 |
| runc | < 1.1.5 | 1.1.5 |
| openshift container platform | = 4.0 |
runc 1.0.0-rc95 through 1.1.4 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit this, an attacker must be able to spawn two containers with custom volume-mount configurations, and be able to run custom images. NOTE: this issue exists because of a CVE-2019-19921 regression.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free