Lucene search

K
osvGoogleOSV:USN-4867-1
HistoryAug 10, 2021 - 7:58 p.m.

runc vulnerabilities

2021-08-1019:58:08
Google
osv.dev
4

7.1 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.7%

It was discovered that runC incorrectly checked mount targets. An attacker
with a malicious container image could possibly mount over the /proc
directory and escalate privileges. (CVE-2019-16884)

Etienne Champetier discovered that runC incorrectly checked mount targets.
An attacker with a malicious container image could possibly mount the host
filesystem into the container and escalate privileges. (CVE-2021-30465)