VulnerabilityModified
CVE-2019-16884
runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount targets, and thus a malicious Docker image can mount over a /proc directory.
HIGH 7.5EPSS 4.41%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (4.41%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount targets, and thus a malicious Docker image can mount over a /proc directory.
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- EPSS
- 4.41% probability · 91th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-863
- Affected
- linuxfoundation/runc · docker/docker · fedoraproject/fedora · opensuse/leap · redhat/openshift container platform · redhat/enterprise linux · redhat/enterprise linux eus · redhat/enterprise linux server aus · redhat/enterprise linux server tus · canonical/ubuntu linux
- Source
- cve@mitre.org
References
- http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00073.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00009.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00010.htmlMailing List, Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3940Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:4074Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:4269Third Party Advisory
- https://github.com/opencontainers/runc/issues/2128Exploit, Issue Tracking, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/02/msg00016.html
- https://lists.debian.org/debian-lts-announce/2023/03/msg00023.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62OQ2P7K5YDZ5BRCH2Q6DHUJIHQD3QCD/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DGK6IV5JGVDXHOXEKJOJWKOVNZLT6MYR/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPK4JWP32BUIVDJ3YODZSOEVEW6BHQCF/
- https://security.gentoo.org/glsa/202003-21Third Party Advisory
- https://security.netapp.com/advisory/ntap-20220221-0004/Third Party Advisory
- https://usn.ubuntu.com/4297-1/Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00073.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00009.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00010.htmlMailing List, Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3940Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:4074Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:4269Third Party Advisory
- https://github.com/opencontainers/runc/issues/2128Exploit, Issue Tracking, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/02/msg00016.html
- https://lists.debian.org/debian-lts-announce/2023/03/msg00023.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62OQ2P7K5YDZ5BRCH2Q6DHUJIHQD3QCD/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DGK6IV5JGVDXHOXEKJOJWKOVNZLT6MYR/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPK4JWP32BUIVDJ3YODZSOEVEW6BHQCF/
- https://security.gentoo.org/glsa/202003-21Third Party Advisory
- https://security.netapp.com/advisory/ntap-20220221-0004/Third Party Advisory
- https://usn.ubuntu.com/4297-1/Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.