{"metadata": {"vulnerability": "CVE-2021-43784", "count": 126, "kinds": {"milestone": 31, "sighting": 3, "kev": 0, "other": 92}}, "data": [{"timestamp": "2021-11-16T00:00:00Z", "date_only": false, "value": "2021-11-16T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-43784", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-12-02T00:00:00Z", "date_only": false, "value": "2021-12-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-43784", "record": "MSRC_CVE-2021-43784", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-12-06T00:00:00Z", "date_only": false, "value": "2021-12-06T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2023:6380", "record": "RHSA-2023:6380", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2021-12-06T00:00:00Z", "date_only": false, "value": "2021-12-06T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_6380", "record": "RHSA-2023_6380", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2021-12-06T00:00:00Z", "date_only": true, "value": "2021-12-06", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2021-43784", "record": "GSD-2021-43784", "field": "namespaces.gitlab.com.advisories.1.pubdate"}, {"timestamp": "2021-12-06T00:00:00Z", "date_only": false, "value": "2021-12-06T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-43784", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-12-06T00:00:00Z", "date_only": false, "value": "2021-12-06T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2023:6380", "record": "RHSA-2023:6380", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-12-06T00:00:00Z", "date_only": false, "value": "2021-12-06T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_6380", "record": "RHSA-2023_6380", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-12-06T18:15:00Z", "date_only": false, "value": "2021-12-06T18:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-V95C-P5HM-XQ8F", "record": "GHSA-V95C-P5HM-XQ8F", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-12-06T18:15:00Z", "date_only": false, "value": "2021-12-06T18:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2021-43784", "record": "UBUNTU-CVE-2021-43784", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-12-06T18:15:08.240Z", "date_only": false, "value": "2021-12-06T18:15:08.240", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-43784", "record": "FKIE_CVE-2021-43784", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-12-06T18:15:08.240Z", "date_only": false, "value": "2021-12-06T18:15:08.240", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2021-43784", "record": "GSD-2021-43784", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2021-12-06T20:21:00Z", "date_only": false, "value": "2021-12-06T20:21:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/33401", "record": "CVE-2021-43784", "field": "creation_timestamp", "uuid": "232ad6f8-7559-4f43-8a72-123ba1a0902c", "content": "\u203c CVE-2021-43784 \u203c\n\nrunc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc, netlink is used internally as a serialization system for specifying the relevant container configuration to the `C` portion of the code (responsible for the based namespace setup of containers). In all versions of runc prior to 1.0.3, the encoder did not handle the possibility of an integer overflow in the 16-bit length field for the byte array attribute type, meaning that a large enough malicious byte array attribute could result in the length overflowing and the attribute contents being parsed as netlink messages for container configuration. This vulnerability requires the attacker to have some control over the configuration of the container and would allow the attacker to bypass the namespace restrictions of the container by simply adding their own netlink payload which disables all namespaces. The main users impacted are those who allow untrusted images with untrusted configurations to run on their machines (such as with shared cloud infrastructure). runc version 1.0.3 contains a fix for this bug. As a workaround, one may try disallowing untrusted namespace paths from your container. It should be noted that untrusted namespace paths would allow the attacker to disable namespace protections entirely even in the absence of this bug.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/33401"}, {"timestamp": "2021-12-07T00:00:00Z", "date_only": true, "value": "2021-12-07", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2021-43784", "record": "GSD-2021-43784", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2021-12-07T09:32:57Z", "date_only": false, "value": "2021-12-07T09:32:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/BlueRedTeam/1289", "record": "CVE-2021-43784", "field": "creation_timestamp", "uuid": "33047a79-8135-4b4c-a7f3-ac56bcad99e8", "content": "#exploit\n1. CVE-2021-43784:\nrunc/libcontainer - insecure handling of bind mount sources\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2241\n]-> https://github.com/opencontainers/runc/security/advisories/GHSA-v95c-p5hm-xq8f\n\n2. CVE-2021-1048:\nrefcount increment on mid-destruction file\nhttps://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-1048.html\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/1289"}, {"timestamp": "2021-12-07T15:16:34Z", "date_only": false, "value": "2021-12-07T15:16:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/4922", "record": "CVE-2021-43784", "field": "creation_timestamp", "uuid": "fec016d4-0072-4bcd-8f53-5b7957bfc70e", "content": "#exploit\n1. CVE-2021-43784:\nrunc/libcontainer - insecure handling of bind mount sources\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2241\n]-> https://github.com/opencontainers/runc/security/advisories/GHSA-v95c-p5hm-xq8f\n\n2. CVE-2021-1048:\nrefcount increment on mid-destruction file\nhttps://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-1048.html", "url": "https://t.me/CyberSecurityTechnologies/4922", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2021-12-07T21:22:39Z", "date_only": false, "value": "2021-12-07T21:22:39Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-V95C-P5HM-XQ8F", "record": "GHSA-V95C-P5HM-XQ8F", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-12-08T00:00:00Z", "date_only": false, "value": "2021-12-08T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-43784", "record": "MSRC_CVE-2021-43784", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-12-08T00:00:00Z", "date_only": true, "value": "2021-12-08", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2021-43784", "record": "GSD-2021-43784", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2021-12-08T00:00:00Z", "date_only": false, "value": "2021-12-08T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-43784", "record": "MSRC_CVE-2021-43784", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2021-12-14T11:47:19Z", "date_only": false, "value": "2021-12-14T11:47:19Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:4059-1", "record": "SUSE-SU-2021:4059-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-12-14T11:47:19Z", "date_only": false, "value": "2021-12-14T11:47:19Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2021:4059-1", "record": "SUSE-SU-2021:4059-1", "field": "document.tracking.generator.date"}, {"timestamp": "2021-12-14T11:47:19Z", "date_only": false, "value": "2021-12-14T11:47:19Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2021:4059-1", "record": "SUSE-SU-2021:4059-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2021-12-14T11:47:19Z", "date_only": false, "value": "2021-12-14T11:47:19Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2021:4059-1", "record": "SUSE-SU-2021:4059-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-12-16T00:00:00Z", "date_only": false, "value": "2021-12-16T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-43784", "record": "MSRC_CVE-2021-43784", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2021-12-16T00:00:00Z", "date_only": false, "value": "2021-12-16T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-43784", "record": "MSRC_CVE-2021-43784", "field": "document.tracking.current_release_date"}, {"timestamp": "2021-12-23T08:55:23Z", "date_only": false, "value": "2021-12-23T08:55:23Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:4171-1", "record": "SUSE-SU-2021:4171-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-12-23T08:55:23Z", "date_only": false, "value": "2021-12-23T08:55:23Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2021:4171-1", "record": "SUSE-SU-2021:4171-1", "field": "document.tracking.generator.date"}, {"timestamp": "2021-12-23T08:55:23Z", "date_only": false, "value": "2021-12-23T08:55:23Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2021:4171-1", "record": "SUSE-SU-2021:4171-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2021-12-23T08:55:23Z", "date_only": false, "value": "2021-12-23T08:55:23Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2021:4171-1", "record": "SUSE-SU-2021:4171-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-12-23T08:55:34Z", "date_only": false, "value": "2021-12-23T08:55:34Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:4171-1", "record": "OPENSUSE-SU-2021:4171-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-12-23T08:55:34Z", "date_only": false, "value": "2021-12-23T08:55:34Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:4171-1", "record": "OPENSUSE-SU-2021:4171-1", "field": "document.tracking.generator.date"}, {"timestamp": "2021-12-23T08:55:34Z", "date_only": false, "value": "2021-12-23T08:55:34Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:4171-1", "record": "OPENSUSE-SU-2021:4171-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2021-12-23T08:55:34Z", "date_only": false, "value": "2021-12-23T08:55:34Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:4171-1", "record": "OPENSUSE-SU-2021:4171-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-12-26T13:06:17Z", "date_only": false, "value": "2021-12-26T13:06:17Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:1625-1", "record": "OPENSUSE-SU-2021:1625-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-12-26T13:06:17Z", "date_only": false, "value": "2021-12-26T13:06:17Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:1625-1", "record": "OPENSUSE-SU-2021:1625-1", "field": "document.tracking.generator.date"}, {"timestamp": "2021-12-26T13:06:17Z", "date_only": false, "value": "2021-12-26T13:06:17Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:1625-1", "record": "OPENSUSE-SU-2021:1625-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2021-12-26T13:06:17Z", "date_only": false, "value": "2021-12-26T13:06:17Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:1625-1", "record": "OPENSUSE-SU-2021:1625-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-06-29T22:00:00Z", "date_only": false, "value": "2022-06-29T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0510", "record": "WID-SEC-W-2022-0510", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-06-29T22:00:00Z", "date_only": false, "value": "2022-06-29T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0510", "record": "WID-SEC-W-2022-0510", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-06-29T22:00:00Z", "date_only": false, "value": "2022-06-29T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0510", "record": "WID-SEC-W-2022-0510", "field": "vulnerabilities.58.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-06-30T00:00:00Z", "date_only": false, "value": "2022-06-30T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-591", "record": "CERTFR-2022-AVI-591", "field": "revisions.0.revision_date"}, {"timestamp": "2022-10-20T22:00:00Z", "date_only": false, "value": "2022-10-20T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0510", "record": "WID-SEC-W-2022-0510", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-02-15T00:00:00Z", "date_only": false, "value": "2023-02-15T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2023:6380", "record": "RHSA-2023:6380", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2023-02-15T00:00:00Z", "date_only": false, "value": "2023-02-15T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_6380", "record": "RHSA-2023_6380", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2023-02-20T00:00:00Z", "date_only": false, "value": "2023-02-20T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2023:6380", "record": "RHSA-2023:6380", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2023-02-20T00:00:00Z", "date_only": false, "value": "2023-02-20T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_6380", "record": "RHSA-2023_6380", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2023-03-06T00:00:00Z", "date_only": false, "value": "2023-03-06T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2023:6380", "record": "RHSA-2023:6380", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2023-03-06T00:00:00Z", "date_only": false, "value": "2023-03-06T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_6380", "record": "RHSA-2023_6380", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2023-03-15T00:00:00Z", "date_only": false, "value": "2023-03-15T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2023:6380", "record": "RHSA-2023:6380", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2023-03-15T00:00:00Z", "date_only": false, "value": "2023-03-15T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_6380", "record": "RHSA-2023_6380", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2023-03-29T00:00:00Z", "date_only": false, "value": "2023-03-29T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2023:6380", "record": "RHSA-2023:6380", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2023-03-29T00:00:00Z", "date_only": false, "value": "2023-03-29T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_6380", "record": "RHSA-2023_6380", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2023-03-29T00:00:00Z", "date_only": false, "value": "2023-03-29T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2023:6380", "record": "RHSA-2023:6380", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2023-03-29T00:00:00Z", "date_only": false, "value": "2023-03-29T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_6380", "record": "RHSA-2023_6380", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2023-08-31T12:13:41.465Z", "date_only": false, "value": "2023-08-31T12:13:41.465429Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2021-43784", "record": "BELL-CVE-2021-43784", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-08-31T12:13:41.465Z", "date_only": false, "value": "2023-08-31T12:13:41.465434Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2021-43784", "record": "BELL-CVE-2021-43784", "field": "modified"}, {"timestamp": "2023-08-31T12:13:41.465Z", "date_only": false, "value": "2023-08-31T12:13:41.465434Z", "kind": "other", "label": "Withdrawn", "source": "osv_bellsoft \u00b7 BELL-CVE-2021-43784", "record": "BELL-CVE-2021-43784", "field": "withdrawn"}, {"timestamp": "2023-11-07T00:00:00Z", "date_only": false, "value": "2023-11-07T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2023:6380", "record": "ALSA-2023:6380", "field": "published"}, {"timestamp": "2023-11-07T08:47:52Z", "date_only": false, "value": "2023-11-07T08:47:52+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2023:6380", "record": "RHSA-2023:6380", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-11-07T08:47:52Z", "date_only": false, "value": "2023-11-07T08:47:52+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023_6380", "record": "RHSA-2023_6380", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-11-07T08:47:52Z", "date_only": false, "value": "2023-11-07T08:47:52+00:00", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2023:6380", "record": "RHSA-2023:6380", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-11-07T08:47:52Z", "date_only": false, "value": "2023-11-07T08:47:52+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023_6380", "record": "RHSA-2023_6380", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-11-07T08:47:52Z", "date_only": false, "value": "2023-11-07T08:47:52+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_opensuse \u00b7 RHSA-2023:6380", "record": "RHSA-2023:6380", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2023-11-07T08:47:52Z", "date_only": false, "value": "2023-11-07T08:47:52+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2023_6380", "record": "RHSA-2023_6380", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2023-11-14T12:05:08Z", "date_only": false, "value": "2023-11-14T12:05:08Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2023:6380", "record": "ALSA-2023:6380", "field": "modified"}, {"timestamp": "2023-12-13T01:23:26.489Z", "date_only": false, "value": "2023-12-13T01:23:26.489370Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-43784", "record": "GSD-2021-43784", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-02-19T03:06:18.060Z", "date_only": false, "value": "2024-02-19T03:06:18.060Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2021-43784", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-02-19T03:15:07.330Z", "date_only": false, "value": "2024-02-19T03:15:07.330", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-43784", "record": "GSD-2021-43784", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-04-26T00:00:00Z", "date_only": false, "value": "2024-04-26T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0350", "record": "CERTFR-2024-AVI-0350", "field": "revisions.0.revision_date"}, {"timestamp": "2024-05-03T00:00:00Z", "date_only": false, "value": "2024-05-03T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0366", "record": "CERTFR-2024-AVI-0366", "field": "revisions.0.revision_date"}, {"timestamp": "2024-05-31T17:47:57Z", "date_only": false, "value": "2024-05-31T17:47:57Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-V95C-P5HM-XQ8F", "record": "GHSA-V95C-P5HM-XQ8F", "field": "modified"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11664-1", "record": "OPENSUSE-SU-2024:11664-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11664-1", "record": "OPENSUSE-SU-2024:11664-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11664-1", "record": "OPENSUSE-SU-2024:11664-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11664-1", "record": "OPENSUSE-SU-2024:11664-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-08-04T04:03:08.907Z", "date_only": false, "value": "2024-08-04T04:03:08.907Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-43784", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-30T00:00:00Z", "date_only": true, "value": "2024-09-30", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0841", "record": "CERTFR-2024-AVI-0841", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-10-04T00:00:00Z", "date_only": false, "value": "2024-10-04T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0841", "record": "CERTFR-2024-AVI-0841", "field": "revisions.0.revision_date"}, {"timestamp": "2024-10-15T17:09:32.113Z", "date_only": false, "value": "2024-10-15T17:09:32.113665Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-43784", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-10-15T17:09:32.113Z", "date_only": false, "value": "2024-10-15T17:09:32.113665Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-43784", "record": "FKIE_CVE-2021-43784", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-10-15T17:14:20.240Z", "date_only": false, "value": "2024-10-15T17:14:20.240Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-43784", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-10-15T17:14:20.240Z", "date_only": false, "value": "2024-10-15T17:14:20.240Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-43784", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-17T22:26:02Z", "date_only": false, "value": "2024-12-17T22:26:02+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023_6380", "record": "RHSA-2023_6380", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-12-17T22:26:02Z", "date_only": false, "value": "2024-12-17T22:26:02+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023_6380", "record": "RHSA-2023_6380", "field": "document.tracking.generator.date"}, {"timestamp": "2024-12-17T22:26:02Z", "date_only": false, "value": "2024-12-17T22:26:02+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023_6380", "record": "RHSA-2023_6380", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-07-07T00:00:00Z", "date_only": true, "value": "2025-07-07", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0590", "record": "CERTFR-2025-AVI-0590", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2025-07-08T00:00:00Z", "date_only": true, "value": "2025-07-08", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0590", "record": "CERTFR-2025-AVI-0590", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-07-09T00:00:00Z", "date_only": true, "value": "2025-07-09", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0590", "record": "CERTFR-2025-AVI-0590", "field": "vendor_advisories.3.published_at"}, {"timestamp": "2025-07-11T00:00:00Z", "date_only": true, "value": "2025-07-11", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0590", "record": "CERTFR-2025-AVI-0590", "field": "vendor_advisories.4.published_at"}, {"timestamp": "2025-07-11T00:00:00Z", "date_only": false, "value": "2025-07-11T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0590", "record": "CERTFR-2025-AVI-0590", "field": "revisions.0.revision_date"}, {"timestamp": "2025-09-08T16:47:25Z", "date_only": false, "value": "2025-09-08T16:47:25Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2021-43784", "record": "UBUNTU-CVE-2021-43784", "field": "modified"}, {"timestamp": "2025-10-19T22:29:46.216Z", "date_only": false, "value": "2025-10-19T22:29:46.216Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-43784", "record": "MSRC_CVE-2021-43784", "field": "document.tracking.generator.date"}, {"timestamp": "2026-05-15T00:00:00Z", "date_only": true, "value": "2026-05-15", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0641", "record": "CERTFR-2026-AVI-0641", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-05-17T00:00:00Z", "date_only": true, "value": "2026-05-17", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0641", "record": "CERTFR-2026-AVI-0641", "field": "vendor_advisories.6.published_at"}, {"timestamp": "2026-05-18T00:00:00Z", "date_only": true, "value": "2026-05-18", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0641", "record": "CERTFR-2026-AVI-0641", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-05-18T22:00:00Z", "date_only": false, "value": "2026-05-18T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0510", "record": "WID-SEC-W-2022-0510", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-05-18T22:00:00Z", "date_only": false, "value": "2026-05-18T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0510", "record": "WID-SEC-W-2022-0510", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-05-19T00:00:00Z", "date_only": true, "value": "2026-05-19", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0641", "record": "CERTFR-2026-AVI-0641", "field": "vendor_advisories.4.published_at"}, {"timestamp": "2026-05-19T08:35:57.611Z", "date_only": false, "value": "2026-05-19T08:35:57.611+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0510", "record": "WID-SEC-W-2022-0510", "field": "document.tracking.generator.date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": true, "value": "2026-05-21", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0641", "record": "CERTFR-2026-AVI-0641", "field": "vendor_advisories.10.published_at"}, {"timestamp": "2026-05-22T00:00:00Z", "date_only": false, "value": "2026-05-22T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0641", "record": "CERTFR-2026-AVI-0641", "field": "last_revision_date"}, {"timestamp": "2026-05-22T00:00:00Z", "date_only": false, "value": "2026-05-22T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0641", "record": "CERTFR-2026-AVI-0641", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-05-22T00:00:00Z", "date_only": false, "value": "2026-05-22T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0641", "record": "CERTFR-2026-AVI-0641", "field": "revisions.0.revision_date"}, {"timestamp": "2026-06-17T04:11:25.983Z", "date_only": false, "value": "2026-06-17T04:11:25.983", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-43784", "record": "FKIE_CVE-2021-43784", "field": "lastModified"}, {"timestamp": "2026-07-21T11:18:44.241Z", "date_only": false, "value": "2026-07-21T11:18:44.241030Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-MW42038", "record": "CLEANSTART-2026-MW42038", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-30T07:10:53Z", "date_only": false, "value": "2026-07-30T07:10:53Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-EM71805", "record": "CLEANSTART-2026-EM71805", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-18T10:00:53.186Z", "date_only": false, "value": "2026-09-18T10:00:53.186243Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-DZ88951", "record": "CLEANSTART-2026-DZ88951", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-EM71805", "record": "CLEANSTART-2026-EM71805", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-MW42038", "record": "CLEANSTART-2026-MW42038", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-EM71805", "record": "CLEANSTART-2026-EM71805", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-MW42038", "record": "CLEANSTART-2026-MW42038", "field": "withdrawn"}, {"timestamp": "2026-09-20T14:11:49Z", "date_only": false, "value": "2026-09-20T14:11:49Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:4059-1", "record": "SUSE-SU-2021:4059-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T14:11:49Z", "date_only": false, "value": "2026-09-20T14:11:49Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2021:4059-1", "record": "SUSE-SU-2021:4059-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T14:12:30Z", "date_only": false, "value": "2026-09-20T14:12:30Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:4171-1", "record": "SUSE-SU-2021:4171-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T14:12:30Z", "date_only": false, "value": "2026-09-20T14:12:30Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2021:4171-1", "record": "SUSE-SU-2021:4171-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T19:31:35Z", "date_only": false, "value": "2026-09-20T19:31:35Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:1625-1", "record": "OPENSUSE-SU-2021:1625-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:31:35Z", "date_only": false, "value": "2026-09-20T19:31:35Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:1625-1", "record": "OPENSUSE-SU-2021:1625-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T19:37:21Z", "date_only": false, "value": "2026-09-20T19:37:21Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:4171-1", "record": "OPENSUSE-SU-2021:4171-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:37:21Z", "date_only": false, "value": "2026-09-20T19:37:21Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:4171-1", "record": "OPENSUSE-SU-2021:4171-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T20:23:15Z", "date_only": false, "value": "2026-09-20T20:23:15Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11664-1", "record": "OPENSUSE-SU-2024:11664-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T20:23:15Z", "date_only": false, "value": "2026-09-20T20:23:15Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11664-1", "record": "OPENSUSE-SU-2024:11664-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-08T18:50:55Z", "date_only": false, "value": "2026-10-08T18:50:55Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-DZ88951", "record": "CLEANSTART-2026-DZ88951", "field": "modified"}, {"timestamp": "2026-10-25T18:36:36Z", "date_only": false, "value": "2026-10-25T18:36:36+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2023:6380", "record": "RHSA-2023:6380", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-25T18:36:36Z", "date_only": false, "value": "2026-10-25T18:36:36+00:00", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2023:6380", "record": "RHSA-2023:6380", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-25T18:36:36Z", "date_only": false, "value": "2026-10-25T18:36:36+00:00", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2023:6380", "record": "RHSA-2023:6380", "field": "document.tracking.current_release_date"}], "metrics": {"as_of": "2026-10-28T14:35:40.924Z", "anchors": {"origin": {"timestamp": "2021-12-06T00:00:00Z", "date_only": false, "value": "2021-12-06T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2023:6380", "record": "RHSA-2023:6380", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "discovery": {"timestamp": "2021-12-06T00:00:00Z", "date_only": false, "value": "2021-12-06T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2023:6380", "record": "RHSA-2023:6380", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2021-12-02T00:00:00Z", "date_only": false, "value": "2021-12-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-43784", "record": "MSRC_CVE-2021-43784", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2021-12-07T15:16:34Z", "date_only": false, "value": "2021-12-07T15:16:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/4922", "record": "CVE-2021-43784", "field": "creation_timestamp", "uuid": "fec016d4-0072-4bcd-8f53-5b7957bfc70e", "content": "#exploit\n1. CVE-2021-43784:\nrunc/libcontainer - insecure handling of bind mount sources\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2241\n]-> https://github.com/opencontainers/runc/security/advisories/GHSA-v95c-p5hm-xq8f\n\n2. CVE-2021-1048:\nrefcount increment on mid-destruction file\nhttps://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-1048.html", "url": "https://t.me/CyberSecurityTechnologies/4922", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": {"timestamp": "2021-12-08T00:00:00Z", "date_only": false, "value": "2021-12-08T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-43784", "record": "MSRC_CVE-2021-43784", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 486994.0, "hours": 135.2761111111111, "days": 5.63650462962963, "min_seconds": 400594.0, "max_seconds": 486994.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-12-02T00:00:00Z", "date_only": false, "value": "2021-12-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-43784", "record": "MSRC_CVE-2021-43784", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2021-12-07T15:16:34Z", "date_only": false, "value": "2021-12-07T15:16:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/4922", "record": "CVE-2021-43784", "field": "creation_timestamp", "uuid": "fec016d4-0072-4bcd-8f53-5b7957bfc70e", "content": "#exploit\n1. CVE-2021-43784:\nrunc/libcontainer - insecure handling of bind mount sources\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2241\n]-> https://github.com/opencontainers/runc/security/advisories/GHSA-v95c-p5hm-xq8f\n\n2. CVE-2021-1048:\nrefcount increment on mid-destruction file\nhttps://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-1048.html", "url": "https://t.me/CyberSecurityTechnologies/4922", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": true, "seconds": 172800.0, "hours": 48.0, "days": 2.0, "min_seconds": 86400.0, "max_seconds": 259200.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-12-06T00:00:00Z", "date_only": false, "value": "2021-12-06T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2023:6380", "record": "RHSA-2023:6380", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "end": {"timestamp": "2021-12-08T00:00:00Z", "date_only": false, "value": "2021-12-08T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-43784", "record": "MSRC_CVE-2021-43784", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "disclosure_to_patch": {"available": true, "seconds": 518400.0, "hours": 144.0, "days": 6.0, "min_seconds": 432000.0, "max_seconds": 604800.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-12-02T00:00:00Z", "date_only": false, "value": "2021-12-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-43784", "record": "MSRC_CVE-2021-43784", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2021-12-08T00:00:00Z", "date_only": false, "value": "2021-12-08T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-43784", "record": "MSRC_CVE-2021-43784", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "time_unpatched": {"available": true, "seconds": 172800.0, "hours": 48.0, "days": 2.0, "min_seconds": 86400.0, "max_seconds": 259200.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-12-06T00:00:00Z", "date_only": false, "value": "2021-12-06T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2023:6380", "record": "RHSA-2023:6380", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "end": {"timestamp": "2021-12-08T00:00:00Z", "date_only": false, "value": "2021-12-08T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-43784", "record": "MSRC_CVE-2021-43784", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 31406.0, "hours": 8.723888888888888, "days": 0.3634953703703704, "min_seconds": 31406.0, "max_seconds": 117806.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-12-07T15:16:34Z", "date_only": false, "value": "2021-12-07T15:16:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/4922", "record": "CVE-2021-43784", "field": "creation_timestamp", "uuid": "fec016d4-0072-4bcd-8f53-5b7957bfc70e", "content": "#exploit\n1. CVE-2021-43784:\nrunc/libcontainer - insecure handling of bind mount sources\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2241\n]-> https://github.com/opencontainers/runc/security/advisories/GHSA-v95c-p5hm-xq8f\n\n2. CVE-2021-1048:\nrefcount increment on mid-destruction file\nhttps://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-1048.html", "url": "https://t.me/CyberSecurityTechnologies/4922", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2021-12-08T00:00:00Z", "date_only": false, "value": "2021-12-08T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-43784", "record": "MSRC_CVE-2021-43784", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}}}