Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
suseSuseOPENSUSE-SU-2019:1227-1
HistoryApr 17, 2019 - 12:00 a.m.

Security update for lxc, lxcfs (important)

2019-04-1700:00:00
lists.opensuse.org
129

EPSS

0.004

Percentile

74.6%

JSON

An update that solves two vulnerabilities and has one
errata is now available.

Description:

This update for lxc, lxcfs to version 3.1.0 fixes the following issues:

Security issues fixed:

  • CVE-2019-5736: Fixed a container breakout vulnerability (boo#1122185).
  • CVE-2018-6556: Enable setuid bit on lxc-user-nic (boo#988348).

Non-security issues fixed:

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Backports SLE-15:

    zypper in -t patch openSUSE-2019-1227=1

OSVersionArchitecturePackageVersionFilename
openSUSE Backports SLE15aarch64<  openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64):- openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64):.aarch64.rpm
openSUSE Backports SLE15ppc64le<  openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64):- openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64):.ppc64le.rpm
openSUSE Backports SLE15s390x<  openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64):- openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64):.s390x.rpm
openSUSE Backports SLE15x86_64<  openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64):- openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64):.x86_64.rpm
openSUSE Backports SLE15noarch<  openSUSE Backports SLE-15 (noarch):- openSUSE Backports SLE-15 (noarch):.noarch.rpm

Related

openvas 35
nessus 48
suse 8
osv 8
prion 3
ubuntucve 3
gentoo 1
cve 3
ubuntu 1
cvelist 3
debiancve 3
alpinelinux 3
nvd 3
redhat 5
fedora 13
githubexploit 8
impervablog 1
hackerone 3
ibm 6
zdt 2
oraclelinux 2
trendmicroblog 2
veracode 1
thn 2
photon 3
redhatcve 2
qualysblog 1
archlinux 2
kitploit 2
altlinux 2
threatpost 4
almalinux 1
cbl_mariner 1
vmware 2
exploitdb 2
checkpoint_advisories 1
cisco 1
rocky 1
cloudfoundry 1
mageia 2
exploitpack 1
virtuozzo 1
f5 1
amazon 1
openvas
openvas
openSUSE: Security Advisory for lxc, lxcfs (openSUSE-SU-2019:1275-1)
2019-04-26 00:00:00
openSUSE: Security Advisory for lxc (openSUSE-SU-2018:2316-1)
2018-10-26 00:00:00
Ubuntu: Security Advisory (USN-3730-1)
2018-08-07 00:00:00
nessus
nessus
openSUSE Security Update : lxc / lxcfs (openSUSE-2019-1275)
2019-04-26 00:00:00
openSUSE Security Update : lxc (openSUSE-2019-596)
2019-03-27 00:00:00
Ubuntu 18.04 LTS : LXC vulnerability (USN-3730-1)
2018-08-07 00:00:00
suse
suse
Security update for lxc, lxcfs (important)
2019-04-25 00:00:00
Security update for lxc (moderate)
2019-04-18 00:00:00
Security update for lxc (moderate)
2018-08-13 21:09:16
osv
osv
liblxc-devel-4.0.9-1.1 on GA media
2024-06-15 00:00:00
CVE-2018-6556
2018-08-10 15:29:01
Important: container-tools:rhel8 security and bug fix update
2019-05-07 03:39:11
prion
prion
Design/Logic Flaw
2018-08-10 15:29:00
Design/Logic Flaw
2019-02-11 19:29:00
Path traversal
2023-01-01 06:15:00
ubuntucve
ubuntucve
CVE-2018-6556
2018-08-06 00:00:00
CVE-2019-5736
2019-02-11 00:00:00
CVE-2022-47952
2023-01-01 00:00:00
gentoo
gentoo
LinuX Containers user space utilities: Arbitrary file read
2018-08-22 00:00:00
cve
cve
CVE-2018-6556
2018-08-10 15:29:01
CVE-2019-5736
2019-02-11 19:29:00
CVE-2022-47952
2023-01-01 06:15:09
ubuntu
ubuntu
LXC vulnerability
2018-08-06 00:00:00
cvelist
cvelist
CVE-2018-6556 The lxc-user-nic component of LXC allows unprivileged users to open arbitrary files
2018-08-10 15:00:00
CVE-2019-5736
2019-02-11 00:00:00
CVE-2022-47952
2023-01-01 00:00:00
debiancve
debiancve
CVE-2018-6556
2018-08-10 15:29:01
CVE-2019-5736
2019-02-11 19:29:00
CVE-2022-47952
2023-01-01 06:15:09
alpinelinux
alpinelinux
CVE-2018-6556
2018-08-10 15:29:01
CVE-2019-5736
2019-02-11 19:29:00
CVE-2022-47952
2023-01-01 06:15:09
nvd
nvd
CVE-2018-6556
2018-08-10 15:29:01
CVE-2019-5736
2019-02-11 19:29:00
CVE-2022-47952
2023-01-01 06:15:09
redhat
redhat
(RHSA-2019:0304) Important: docker security update
2019-02-11 14:26:20
(RHSA-2019:0303) Important: runc security update
2019-02-11 14:24:53
(RHSA-2019:0975) Important: container-tools:rhel8 security and bug fix update
2019-05-07 03:39:11
fedora
fedora
[SECURITY] Fedora 29 Update: python3-lxc-3.0.4-1.fc29
2019-09-06 12:59:40
[SECURITY] Fedora 29 Update: moby-engine-18.06.0-2.ce.git0ffa825.fc29
2019-02-19 14:04:24
[SECURITY] Fedora 30 Update: lxcfs-3.0.4-1.fc30
2019-09-06 12:35:28
githubexploit
githubexploit
Exploit for OS Command Injection in Docker
2019-06-30 13:42:14
Exploit for OS Command Injection in Docker
2019-08-05 10:15:52
Exploit for OS Command Injection in Docker
2020-05-01 21:07:42
impervablog
impervablog
Hundreds of Vulnerable Docker Hosts Exploited by Cryptocurrency Miners
2019-03-04 21:00:39
hackerone
hackerone
Internet Bug Bounty: CVE-2019-5736: Escape from Docker and Kubernetes containers to root on host
2019-02-13 18:50:11
50m-ctf: CTF write-up: c8889970d9fb722066f31e804e351993
2019-03-03 10:08:22
50m-ctf: $50 million CTF Writeup
2019-03-25 02:28:13
ibm
ibm
Security Bulletin: IBM Cloud Private for Data is affected by an issue with runc used by Docker
2019-10-03 22:50:40
Security Bulletin: IBM Cloud Functions is affected by a privilege escalation vulnerability in runc
2019-02-18 20:15:01
Security Bulletin: A vulnerability in Docker affects PowerKVM
2019-05-17 16:10:01
zdt
zdt
runc < 1.0-rc6 (Docker < 18.09.2) - Container Breakout (2)
2019-02-15 00:00:00
runC < 1.0-rc6 (Docker < 18.09.2) - Host Command Execution Exploit
2019-02-12 00:00:00
oraclelinux
oraclelinux
runc bug fix update
2021-04-28 00:00:00
container-tools:rhel8 security and bug fix update
2019-07-30 00:00:00
trendmicroblog
trendmicroblog
Attacking Containers and runC
2019-02-12 19:22:35
This Week in Security News: Instagram Hackers and Enterprise Threats
2019-03-01 14:57:50
veracode
veracode
Malicious Container Execution
2019-02-12 02:31:29
thn
thn
Microsoft Warns of Cross-Account Takeover Bug in Azure Container Instances
2021-09-10 05:07:00
RunC Flaw Lets Attackers Escape Linux Containers to Gain Root on Hosts
2019-02-12 08:59:00
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-1.0-0208
2019-02-12 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0129
2019-02-13 00:00:00
Important Photon OS Security Update - PHSA-2019-0001
2019-02-12 00:00:00
redhatcve
redhatcve
CVE-2019-5736
2020-01-11 09:33:43
CVE-2020-14298
2020-06-23 19:26:46
qualysblog
qualysblog
RunC Container Breakout Vulnerability
2019-02-12 15:46:10
archlinux
archlinux
[ASA-201902-6] runc: privilege escalation
2019-02-11 00:00:00
[ASA-201902-20] flatpak: privilege escalation
2019-02-17 00:00:00
kitploit
kitploit
Whoc - A Container Image That Extracts The Underlying Container Runtime
2021-11-24 11:30:00
Kubesploit - A Cross-Platform Post-Exploitation HTTP/2 Command And Control Server And Agent Written In Golang
2021-04-22 12:30:00
altlinux
altlinux
Security fix for the ALT Linux 8 package runc version 1.0.0-alt7.git0a012df
2019-02-20 00:00:00
Security fix for the ALT Linux 10 package runc version 1.0.0-alt7.git0a012df
2019-02-13 00:00:00
threatpost
threatpost
Major Container Security Flaw Threatens Cascading Attacks
2019-02-12 18:28:41
Rethinking Cyber-Defense Strategies in the Public-Cloud Age
2022-04-19 17:29:49
'Azurescape' Kubernetes Attack Allows Cross-Container Cloud Compromise
2021-09-09 16:39:13
almalinux
almalinux
Important: container-tools:rhel8 security and bug fix update
2019-05-07 03:39:11
cbl_mariner
cbl_mariner
CVE-2019-5736 affecting package moby-buildx 0.4.1-3
2021-07-08 21:56:42
vmware
vmware
VMware product updates resolve mishandled file descriptor vulnerability in runc container runtime.
2019-02-15 00:00:00
VMware product updates resolve mishandled file descriptor vulnerability in runc container runtime.
2019-02-15 00:00:00
exploitdb
exploitdb
runc &lt; 1.0-rc6 (Docker &lt; 18.09.2) - Container Breakout (2)
2019-02-13 00:00:00
runc &lt; 1.0-rc6 (Docker &lt; 18.09.2) - Container Breakout (1)
2019-02-12 00:00:00
checkpoint_advisories
checkpoint_advisories
runc Container Escape (CVE-2019-5736)
2019-02-14 00:00:00
cisco
cisco
Container Privilege Escalation Vulnerability Affecting Cisco Products: February 2019
2019-02-15 17:00:00
rocky
rocky
container-tools:rhel8 security and bug fix update
2019-05-07 03:39:11
cloudfoundry
cloudfoundry
CVE-2019-5736: runC container breakout | Cloud Foundry
2019-02-13 00:00:00
mageia
mageia
Updated opencontainers-runc packages fix security vulnerability
2019-02-13 14:08:25
Updated lxc packages fix security vulnerability
2019-02-17 03:31:02
exploitpack
exploitpack
runc 1.0-rc6 (Docker 18.09.2) - Container Breakout (2)
2019-02-13 00:00:00
virtuozzo
virtuozzo
Important kernel security update: Virtuozzo ReadyKernel patch 72.0 for all supported Virtuozzo kernels and that of Virtuozzo Infrastructure Platform 2.5
2019-02-12 00:00:00
f5
f5
K46421255 : Docker privilege elevation vulnerability CVE-2019-5736
2019-03-01 00:00:00
amazon
amazon
Important: docker
2019-02-08 22:28:00

EPSS

0.004

Percentile

74.6%

JSON
Related for OPENSUSE-SU-2019:1227-1
openvas35nessus48suse8osv8prion3ubuntucve3gentoo1cve3ubuntu1cvelist3debiancve3alpinelinux3nvd3redhat5fedora13githubexploit8impervablog1hackerone3ibm6zdt2oraclelinux2trendmicroblog2veracode1thn2photon3redhatcve2qualysblog1archlinux2kitploit2altlinux2threatpost4almalinux1cbl_mariner1vmware2exploitdb2checkpoint_advisories1cisco1rocky1cloudfoundry1mageia2exploitpack1virtuozzo1f51amazon1