1. CVE-Search
  2. CVE-2019-16884
ID CVE-2019-16884
Summary runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount targets, and thus a malicious Docker image can mount over a /proc directory.
References
Vulnerable Configurations
  • cpe:2.3:a:linuxfoundation:runc:0.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:linuxfoundation:runc:0.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:linuxfoundation:runc:0.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:linuxfoundation:runc:0.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:linuxfoundation:runc:0.0.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:linuxfoundation:runc:0.0.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:linuxfoundation:runc:0.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:linuxfoundation:runc:0.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:linuxfoundation:runc:0.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:linuxfoundation:runc:0.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:linuxfoundation:runc:0.0.5:*:*:*:*:*:*:*
    cpe:2.3:a:linuxfoundation:runc:0.0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:linuxfoundation:runc:0.0.6:*:*:*:*:*:*:*
    cpe:2.3:a:linuxfoundation:runc:0.0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:linuxfoundation:runc:0.0.7:*:*:*:*:*:*:*
    cpe:2.3:a:linuxfoundation:runc:0.0.7:*:*:*:*:*:*:*
  • cpe:2.3:a:linuxfoundation:runc:0.0.8:*:*:*:*:*:*:*
    cpe:2.3:a:linuxfoundation:runc:0.0.8:*:*:*:*:*:*:*
  • cpe:2.3:a:linuxfoundation:runc:0.0.9:*:*:*:*:*:*:*
    cpe:2.3:a:linuxfoundation:runc:0.0.9:*:*:*:*:*:*:*
  • cpe:2.3:a:linuxfoundation:runc:0.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:linuxfoundation:runc:0.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:linuxfoundation:runc:0.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:linuxfoundation:runc:0.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:linuxfoundation:runc:1.0.0:rc7:*:*:*:*:*:*
    cpe:2.3:a:linuxfoundation:runc:1.0.0:rc7:*:*:*:*:*:*
  • cpe:2.3:a:linuxfoundation:runc:1.0.0:rc6:*:*:*:*:*:*
    cpe:2.3:a:linuxfoundation:runc:1.0.0:rc6:*:*:*:*:*:*
  • cpe:2.3:a:linuxfoundation:runc:1.0.0:rc5:*:*:*:*:*:*
    cpe:2.3:a:linuxfoundation:runc:1.0.0:rc5:*:*:*:*:*:*
  • cpe:2.3:a:linuxfoundation:runc:1.0.0:rc4:*:*:*:*:*:*
    cpe:2.3:a:linuxfoundation:runc:1.0.0:rc4:*:*:*:*:*:*
  • cpe:2.3:a:linuxfoundation:runc:1.0.0:rc3:*:*:*:*:*:*
    cpe:2.3:a:linuxfoundation:runc:1.0.0:rc3:*:*:*:*:*:*
  • cpe:2.3:a:linuxfoundation:runc:1.0.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:linuxfoundation:runc:1.0.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:linuxfoundation:runc:1.0.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:linuxfoundation:runc:1.0.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:linuxfoundation:runc:1.0.0:rc8:*:*:*:*:*:*
    cpe:2.3:a:linuxfoundation:runc:1.0.0:rc8:*:*:*:*:*:*
  • cpe:2.3:a:docker:docker:1.10.0.0-0:*:*:*:community:windows:*:*
    cpe:2.3:a:docker:docker:1.10.0.0-0:*:*:*:community:windows:*:*
  • cpe:2.3:a:docker:docker:1.10.1.42-1:*:*:*:community:windows:*:*
    cpe:2.3:a:docker:docker:1.10.1.42-1:*:*:*:community:windows:*:*
  • cpe:2.3:a:docker:docker:1.10.2.12:*:*:*:community:windows:*:*
    cpe:2.3:a:docker:docker:1.10.2.12:*:*:*:community:windows:*:*
  • cpe:2.3:a:docker:docker:1.10.2.14:*:*:*:community:windows:*:*
    cpe:2.3:a:docker:docker:1.10.2.14:*:*:*:community:windows:*:*
  • cpe:2.3:a:docker:docker:1.10.4.0:*:*:*:community:windows:*:*
    cpe:2.3:a:docker:docker:1.10.4.0:*:*:*:community:windows:*:*
  • cpe:2.3:a:docker:docker:1.10.6:*:*:*:community:windows:*:*
    cpe:2.3:a:docker:docker:1.10.6:*:*:*:community:windows:*:*
  • cpe:2.3:a:docker:docker:1.11:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:1.11:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:1.11.0:-:*:*:community:windows:*:*
    cpe:2.3:a:docker:docker:1.11.0:-:*:*:community:windows:*:*
  • cpe:2.3:a:docker:docker:1.11.1:-:*:*:community:windows:*:*
    cpe:2.3:a:docker:docker:1.11.1:-:*:*:community:windows:*:*
  • cpe:2.3:a:docker:docker:1.11.2:-:*:*:community:windows:*:*
    cpe:2.3:a:docker:docker:1.11.2:-:*:*:community:windows:*:*
  • cpe:2.3:a:docker:docker:1.12.0:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:1.12.0:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:1.12.0:-:*:*:community:windows:*:*
    cpe:2.3:a:docker:docker:1.12.0:-:*:*:community:windows:*:*
  • cpe:2.3:a:docker:docker:1.12.1:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:1.12.1:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:1.12.1:-:*:*:community:windows:*:*
    cpe:2.3:a:docker:docker:1.12.1:-:*:*:community:windows:*:*
  • cpe:2.3:a:docker:docker:1.12.2:-:*:*:community:windows:*:*
    cpe:2.3:a:docker:docker:1.12.2:-:*:*:community:windows:*:*
  • cpe:2.3:a:docker:docker:1.12.3:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:1.12.3:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:1.12.3:-:*:*:community:windows:*:*
    cpe:2.3:a:docker:docker:1.12.3:-:*:*:community:windows:*:*
  • cpe:2.3:a:docker:docker:1.12.4:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:1.12.4:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:1.12.5:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:1.12.5:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:1.13.0:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:1.13.0:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:1.13.0:-:*:*:community:windows:*:*
    cpe:2.3:a:docker:docker:1.13.0:-:*:*:community:windows:*:*
  • cpe:2.3:a:docker:docker:1.13.1:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:1.13.1:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:1.13.1:-:*:*:community:windows:*:*
    cpe:2.3:a:docker:docker:1.13.1:-:*:*:community:windows:*:*
  • cpe:2.3:a:docker:docker:2.0.0.0:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:2.0.0.0:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:2.0.0.2:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:2.0.0.2:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:2.0.0.3:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:2.0.0.3:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:2.1.0.1:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:2.1.0.1:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:2.1.0.2:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:2.1.0.2:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:2.1.0.3:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:2.1.0.3:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:2.1.0.4:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:2.1.0.4:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:2.1.0.5:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:2.1.0.5:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:2.2.0.0:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:2.2.0.0:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:2.2.0.3:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:2.2.0.3:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:2.2.0.4:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:2.2.0.4:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:2.2.0.5:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:2.2.0.5:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:2.3.0.2:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:2.3.0.2:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:2.3.0.3:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:2.3.0.3:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:2.3.0.4:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:2.3.0.4:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:2.3.0.5:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:2.3.0.5:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:2.4.0.0:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:2.4.0.0:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:2.5.0.0:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:2.5.0.0:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.03.0:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.03.0:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.03.0:-:*:*:community:windows:*:*
    cpe:2.3:a:docker:docker:17.03.0:-:*:*:community:windows:*:*
  • cpe:2.3:a:docker:docker:17.03.1:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.03.1:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.03.2:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.03.2:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.03.3:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.03.3:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.04.0:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.04.0:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.05.0:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.05.0:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.06.0:-:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.06.0:-:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.06.0:-:*:*:community:windows:*:*
    cpe:2.3:a:docker:docker:17.06.0:-:*:*:community:windows:*:*
  • cpe:2.3:a:docker:docker:17.06.0:rc1:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.06.0:rc1:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.06.0:rc2:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.06.0:rc2:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.06.0:rc3:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.06.0:rc3:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.06.0:rc4:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.06.0:rc4:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.06.0:rc5:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.06.0:rc5:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.06.1:-:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.06.1:-:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.06.1:-:*:*:community:windows:*:*
    cpe:2.3:a:docker:docker:17.06.1:-:*:*:community:windows:*:*
  • cpe:2.3:a:docker:docker:17.06.1:rc1:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.06.1:rc1:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.06.1:rc2:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.06.1:rc2:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.06.1:rc3:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.06.1:rc3:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.06.1:rc4:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.06.1:rc4:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.06.2:-:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.06.2:-:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.06.2:rc1:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.06.2:rc1:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.07.0:-:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.07.0:-:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.07.0:-:*:*:community:windows:*:*
    cpe:2.3:a:docker:docker:17.07.0:-:*:*:community:windows:*:*
  • cpe:2.3:a:docker:docker:17.07.0:rc1:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.07.0:rc1:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.07.0:rc2:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.07.0:rc2:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.07.0:rc3:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.07.0:rc3:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.07.0:rc4:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.07.0:rc4:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.09.0:-:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.09.0:-:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.09.0:-:*:*:community:windows:*:*
    cpe:2.3:a:docker:docker:17.09.0:-:*:*:community:windows:*:*
  • cpe:2.3:a:docker:docker:17.09.0:rc1:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.09.0:rc1:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.09.0:rc2:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.09.0:rc2:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.09.0:rc3:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.09.0:rc3:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.09.1:-:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.09.1:-:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.09.1:rc1:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.09.1:rc1:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.10.0:-:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.10.0:-:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.10.0:rc1:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.10.0:rc1:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.10.0:rc2:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.10.0:rc2:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.11.0:-:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.11.0:-:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.11.0:-:*:*:community:windows:*:*
    cpe:2.3:a:docker:docker:17.11.0:-:*:*:community:windows:*:*
  • cpe:2.3:a:docker:docker:17.11.0:rc1:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.11.0:rc1:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.11.0:rc2:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.11.0:rc2:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.11.0:rc3:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.11.0:rc3:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.11.0:rc4:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.11.0:rc4:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.12.0:-:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.12.0:-:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.12.0:-:*:*:community:windows:*:*
    cpe:2.3:a:docker:docker:17.12.0:-:*:*:community:windows:*:*
  • cpe:2.3:a:docker:docker:17.12.0:rc1:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.12.0:rc1:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.12.0:rc2:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.12.0:rc2:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.12.0:rc3:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.12.0:rc3:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.12.0:rc4:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.12.0:rc4:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.12.1:-:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.12.1:-:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.12.1:rc1:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.12.1:rc1:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:17.12.1:rc2:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:17.12.1:rc2:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.01.0:-:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.01.0:-:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.01.0:rc1:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.01.0:rc1:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.02.0:-:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.02.0:-:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.02.0:-:*:*:community:windows:*:*
    cpe:2.3:a:docker:docker:18.02.0:-:*:*:community:windows:*:*
  • cpe:2.3:a:docker:docker:18.02.0:rc1:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.02.0:rc1:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.02.0:rc2:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.02.0:rc2:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.03.0:-:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.03.0:-:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.03.0:-:*:*:community:windows:*:*
    cpe:2.3:a:docker:docker:18.03.0:-:*:*:community:windows:*:*
  • cpe:2.3:a:docker:docker:18.03.0:rc1:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.03.0:rc1:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.03.0:rc2:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.03.0:rc2:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.03.0:rc3:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.03.0:rc3:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.03.0:rc4:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.03.0:rc4:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.03.1:-:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.03.1:-:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.03.1:rc1:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.03.1:rc1:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.03.1:rc2:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.03.1:rc2:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.04.0:-:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.04.0:-:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.04.0:rc1:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.04.0:rc1:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.04.0:rc2:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.04.0:rc2:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.05.0:-:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.05.0:-:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.05.0:-:*:*:community:windows:*:*
    cpe:2.3:a:docker:docker:18.05.0:-:*:*:community:windows:*:*
  • cpe:2.3:a:docker:docker:18.05.0:rc1:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.05.0:rc1:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.06.0:-:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.06.0:-:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.06.0:rc1:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.06.0:rc1:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.06.0:rc2:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.06.0:rc2:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.06.0:rc3:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.06.0:rc3:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.06.1:-:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.06.1:-:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.06.1:rc1:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.06.1:rc1:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.06.1:rc2:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.06.1:rc2:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.06.2:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.06.2:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.06.3:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.06.3:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.09.0:-:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.09.0:-:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.09.0:beta1:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.09.0:beta1:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.09.0:beta3:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.09.0:beta3:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.09.0:beta5:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.09.0:beta5:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.09.0:rc1:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.09.0:rc1:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.09.1:-:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.09.1:-:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.09.1:beta1:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.09.1:beta1:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.09.1:beta2:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.09.1:beta2:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.09.1:rc1:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.09.1:rc1:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.09.2:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.09.2:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.09.3:-:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.09.3:-:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.09.3:rc1:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.09.3:rc1:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.09.4:-:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.09.4:-:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.09.4:rc1:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.09.4:rc1:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.09.5:-:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.09.5:-:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.09.5:rc1:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.09.5:rc1:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.09.6:-:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.09.6:-:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.09.6:rc1:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.09.6:rc1:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.09.7:-:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.09.7:-:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.09.7:rc1:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.09.7:rc1:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.09.8:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.09.8:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:18.09.9:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:18.09.9:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:19.03.0:-:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:19.03.0:-:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:19.03.0:beta1:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:19.03.0:beta1:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:19.03.0:beta2:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:19.03.0:beta2:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:19.03.0:beta3:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:19.03.0:beta3:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:19.03.0:beta4:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:19.03.0:beta4:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:19.03.0:beta5:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:19.03.0:beta5:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:19.03.0:rc2:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:19.03.0:rc2:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:19.03.0:rc3:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:19.03.0:rc3:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:19.03.1:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:19.03.1:*:*:*:community:*:*:*
  • cpe:2.3:a:docker:docker:19.03.2:*:*:*:community:*:*:*
    cpe:2.3:a:docker:docker:19.03.2:*:*:*:community:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*
    cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
    cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
    cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
  • cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
    cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
  • cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
    cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
    cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:4.2:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*
    cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*
    cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*
    cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*
    cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*
    cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*
    cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*
    cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
    cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*
    cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 27-03-2023 - 18:15)
Impact:
Exploitability:
CWE CWE-863
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:P/A:N
redhat via4
advisories
  • rhsa
    id RHSA-2019:3940
  • rhsa
    id RHSA-2019:4074
  • rhsa
    id RHSA-2019:4269
rpms
  • runc-0:1.0.0-67.rc10.el7_8
  • runc-debuginfo-0:1.0.0-67.rc10.el7_8
  • runc-0:1.0.0-62.rc8.rhaos4.1.git3cbe540.el8
  • runc-debuginfo-0:1.0.0-62.rc8.rhaos4.1.git3cbe540.el8
  • runc-debugsource-0:1.0.0-62.rc8.rhaos4.1.git3cbe540.el8
  • runc-0:1.0.0-63.rc8.el8
  • runc-debuginfo-0:1.0.0-63.rc8.el8
  • runc-debugsource-0:1.0.0-63.rc8.el8
  • buildah-0:1.9.0-5.module+el8.1.0+4240+893c1ab8
  • buildah-debuginfo-0:1.9.0-5.module+el8.1.0+4240+893c1ab8
  • buildah-debugsource-0:1.9.0-5.module+el8.1.0+4240+893c1ab8
  • buildah-tests-0:1.9.0-5.module+el8.1.0+4240+893c1ab8
  • buildah-tests-debuginfo-0:1.9.0-5.module+el8.1.0+4240+893c1ab8
  • cockpit-podman-0:4-1.module+el8.1.0+4081+b29780af
  • container-selinux-2:2.123.0-2.module+el8.1.0+4900+9d7326b8
  • containernetworking-plugins-0:0.8.1-3.module+el8.1.0+4881+045289ee
  • containernetworking-plugins-debuginfo-0:0.8.1-3.module+el8.1.0+4881+045289ee
  • containernetworking-plugins-debugsource-0:0.8.1-3.module+el8.1.0+4881+045289ee
  • containers-common-1:0.1.37-6.module+el8.1.0+4876+e678a192
  • fuse-overlayfs-0:0.4.1-1.module+el8.1.0+4081+b29780af
  • fuse-overlayfs-debuginfo-0:0.4.1-1.module+el8.1.0+4081+b29780af
  • fuse-overlayfs-debugsource-0:0.4.1-1.module+el8.1.0+4081+b29780af
  • oci-systemd-hook-1:0.1.15-2.git2d0b8a3.module+el8.1.0+4081+b29780af
  • oci-systemd-hook-debuginfo-1:0.1.15-2.git2d0b8a3.module+el8.1.0+4081+b29780af
  • oci-systemd-hook-debugsource-1:0.1.15-2.git2d0b8a3.module+el8.1.0+4081+b29780af
  • oci-umount-2:2.3.4-2.git87f9237.module+el8.1.0+4081+b29780af
  • oci-umount-debuginfo-2:2.3.4-2.git87f9237.module+el8.1.0+4081+b29780af
  • oci-umount-debugsource-2:2.3.4-2.git87f9237.module+el8.1.0+4081+b29780af
  • podman-0:1.4.2-6.module+el8.1.0+4830+f49150d7
  • podman-debuginfo-0:1.4.2-6.module+el8.1.0+4830+f49150d7
  • podman-debugsource-0:1.4.2-6.module+el8.1.0+4830+f49150d7
  • podman-docker-0:1.4.2-6.module+el8.1.0+4830+f49150d7
  • podman-manpages-0:1.4.2-6.module+el8.1.0+4830+f49150d7
  • podman-remote-0:1.4.2-6.module+el8.1.0+4830+f49150d7
  • podman-remote-debuginfo-0:1.4.2-6.module+el8.1.0+4830+f49150d7
  • podman-tests-0:1.4.2-6.module+el8.1.0+4830+f49150d7
  • python-podman-api-0:1.2.0-0.1.gitd0a45fe.module+el8.1.0+4081+b29780af
  • runc-0:1.0.0-61.rc8.module+el8.1.0+4873+4a24e241
  • runc-debuginfo-0:1.0.0-61.rc8.module+el8.1.0+4873+4a24e241
  • runc-debugsource-0:1.0.0-61.rc8.module+el8.1.0+4873+4a24e241
  • skopeo-1:0.1.37-6.module+el8.1.0+4876+e678a192
  • skopeo-debuginfo-1:0.1.37-6.module+el8.1.0+4876+e678a192
  • skopeo-debugsource-1:0.1.37-6.module+el8.1.0+4876+e678a192
  • skopeo-tests-1:0.1.37-6.module+el8.1.0+4876+e678a192
  • slirp4netns-0:0.3.0-4.module+el8.1.0+4306+1d917805
  • slirp4netns-debuginfo-0:0.3.0-4.module+el8.1.0+4306+1d917805
  • slirp4netns-debugsource-0:0.3.0-4.module+el8.1.0+4306+1d917805
  • toolbox-0:0.0.4-1.module+el8.1.0+4081+b29780af
  • docker-2:1.13.1-161.git64e9980.el7_8
  • docker-client-2:1.13.1-161.git64e9980.el7_8
  • docker-common-2:1.13.1-161.git64e9980.el7_8
  • docker-debuginfo-2:1.13.1-161.git64e9980.el7_8
  • docker-logrotate-2:1.13.1-161.git64e9980.el7_8
  • docker-lvm-plugin-2:1.13.1-161.git64e9980.el7_8
  • docker-novolume-plugin-2:1.13.1-161.git64e9980.el7_8
  • docker-rhel-push-plugin-2:1.13.1-161.git64e9980.el7_8
  • docker-v1.10-migrator-2:1.13.1-161.git64e9980.el7_8
refmap via4
fedora
  • FEDORA-2019-3fc86a518b
  • FEDORA-2019-96946c39dd
  • FEDORA-2019-bd4843561c
gentoo GLSA-202003-21
misc https://github.com/opencontainers/runc/issues/2128
suse
  • openSUSE-SU-2019:2418
  • openSUSE-SU-2019:2434
  • openSUSE-SU-2020:0045
ubuntu USN-4297-1
Last major update 27-03-2023 - 18:15
Published 25-09-2019 - 18:15
Last modified 27-03-2023 - 18:15
Back to Top