跳转到帖子

Huawei EulerOS: CVE-2023-27561: docker-runc security update

recommended_posts

发布于
  • Members

Huawei EulerOS: CVE-2023-27561: docker-runc security update

Severity
7
CVSS
(AV:L/AC:M/Au:S/C:C/I:C/A:C)
Published
03/03/2023
Created
05/10/2023
Added
05/09/2023
Modified
01/28/2025

Description

runc through 1.1.4 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit this, an attacker must be able to spawn two containers with custom volume-mount configurations, and be able to run custom images. NOTE: this issue exists because of a CVE-2019-19921 regression.

Solution(s)

  • huawei-euleros-2_0_sp10-upgrade-docker-runc

References

  • https://attackerkb.com/topics/cve-2023-27561
  • CVE - 2023-27561
  • EulerOS-SA-2023-1818
  • 查看数 738
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…