CVE-2019-5736
CVE-2019-5736 is a runc container escape vulnerability that allows an attacker to break through the container boundary by overwriting the runc binary, gaining access to the host machine or other tenants' containers.
Timeline (last 90 days)
Kernel privilege-escalation vulnerabilities (such as Dirty COW and the runc escape vulnerability CVE-2019-5736) may be exploited to break out of the container boundary and thereby access the host machine or other tenants' containers.
Docker was once affected by the runc vulnerability CVE-2019-5736, which allowed processes inside a container to overwrite the host's runc binary and obtain root privileges.
The runC vulnerability CVE-2019-5736 allows processes inside a container to overwrite the runC binary on the host machine.
2019 年的 CVE-2019-5736 runc 漏洞证明了共享内核隔离模型的固有安全风险
All Facts (4)
Kernel privilege-escalation vulnerabilities (such as Dirty COW and the runc escape vulnerability CVE-2019-5736) may be exploited to break out of the container boundary and thereby access the host machine or other tenants' containers.
50%UnverifiedDocker was once affected by the runc vulnerability CVE-2019-5736, which allowed processes inside a container to overwrite the host's runc binary and obtain root privileges.
50%UnverifiedThe runC vulnerability CVE-2019-5736 allows processes inside a container to overwrite the runC binary on the host machine.
50%Unverified2019 年的 CVE-2019-5736 runc 漏洞证明了共享内核隔离模型的固有安全风险
50%