Sandbox Restrictions Bypass

2020-01-1605:48:35

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.0005 Low

EPSS

Percentile

17.1%

JSON

github.com/opencontainers/runc is vulnerable to sandbox restrictions bypass. An attacker who controls the container image for two containers that share a volume will be able to mount arbitrary volumes in a race condition during container initialization via a symlink that is added to the rootfs. This vulnerability allows a malicious container to mount /proc to another location within the attacker’s control and perform unauthorized writes to system files.

CPENameOperatorVersion
github.com/opencontainers/runceqHEAD
github.com/opencontainers/runcle1.0.0-rc9
runceq1.0.0_rc9-r0
runceq1.0.0_rc10-r1
runc:eoaneq1.0.0~rc8+git20190923.3e425f80-0ubuntu1
runc:bioniceq1.0.0~rc4+dfsg1-6
containerd:3.11eq1.3.2-r0
containerd:3.11eq1.3.2-r1
github.com/opencontainers/runceqHEAD
github.com/opencontainers/runcle1.0.0-rc9

Name	Operator	Version
github.com/opencontainers/runc	eq	HEAD
github.com/opencontainers/runc	le	1.0.0-rc9
runc	eq	1.0.0_rc9-r0
runc	eq	1.0.0_rc10-r1
runc:eoan	eq	1.0.0~rc8+git20190923.3e425f80-0ubuntu1
runc:bionic	eq	1.0.0~rc4+dfsg1-6
containerd:3.11	eq	1.3.2-r0
containerd:3.11	eq	1.3.2-r1
github.com/opencontainers/runc	eq	HEAD
github.com/opencontainers/runc	le	1.0.0-rc9