Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4125
HistoryMay 03, 2017 - 6:37 a.m.

Access Restriction Bypass

2017-05-0306:37:47
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4

0.002 Low

EPSS

Percentile

53.1%

github.com/opencontainers/runc is vulnerable to attackers bypassing access restrictions. This is possible when ambient capabilities are enabled but misconfigured. It would allow malicious images to bypass user permissions and access other files within the file system and other mounted volumes. This transitively affects Docker.