GO-2022-0274
Namespace restriction bypass in github.com/opencontainers/runc
At a glance
- Published
- Updated
- CVE
- CVE-2021-43784
- Aliases
- GHSA-v95c-p5hm-xq8f
Description
An attacker with partial control over the bind mount sources of a new container can bypass namespace restrictions.
Affected packages
| Package | Versions |
|---|---|
| Go · github.com/opencontainers/runc | introduced 1.0.1-0.20211012131345-9c444070ec7b, fixed 1.1.0 |
References
- https://github.com/opencontainers/runc/commit/f50369af4b571e358f20b139eea52d612eb55eed FIX
- https://github.com/opencontainers/runc/commit/dde509df4e28cec33b3c99c6cda3d4fd5beafc77 WEB
- https://bugs.chromium.org/p/project-zero/issues/detail?id=2241 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |