{"id":"CVE-2019-5736","aliases":["ALPINE-CVE-2019-5736","ALSA-2019:0975","BELL-CVE-2019-5736","DEBIAN-CVE-2019-5736","EUVD-2019-15309","GHSA-gxmr-w5mj-v8hh","MGASA-2019-0068","MGASA-2019-0087","RHSA-2019:0303","RHSA-2019:0304","RHSA-2019:0408","RHSA-2019:0975","RLSA-2019:0975","SUSE-SU-2019:0362-1","SUSE-SU-2019:0385-1","SUSE-SU-2019:0495-1","SUSE-SU-2019:0573-1","SUSE-SU-2019:1234-1","SUSE-SU-2019:1234-2","SUSE-SU-2019:2117-1","SUSE-SU-2019:2119-1","SUSE-SU-2021:1458-1","UBUNTU-CVE-2019-5736","USN-4048-1","openSUSE-SU-2019:0170-1","openSUSE-SU-2019:0208-1","openSUSE-SU-2019:0252-1","openSUSE-SU-2019:0295-1","openSUSE-SU-2019:1227-1","openSUSE-SU-2019:1275-1","openSUSE-SU-2019:1444-1","openSUSE-SU-2019:1499-1","openSUSE-SU-2019:1506-1","openSUSE-SU-2019:2021-1","openSUSE-SU-2019:2245-1","openSUSE-SU-2019:2286-1","openSUSE-SU-2024:10693-1","openSUSE-SU-2024:10762-1","openSUSE-SU-2024:11030-1","openSUSE-SU-2024:11358-1"],"status":"published","title":"runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to...","description":"runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to /proc/self/exe.","severity":{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.98452,"percentile":0.99919,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-78"],"published":"2019-02-11T00:00:00Z","modified":"2026-11-05T12:15:03Z","exploits":[{"source":"metasploit","id":"exploit/linux/local/docker_runc_escape","title":"Docker Container Escape Via runC Overwrite","type":"exploit","platform":"Linux,Unix","date":"2019-01-01","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/local/docker_runc_escape"},{"source":"exploitdb","id":"EDB-46359","title":"runc \u003c 1.0-rc6 (Docker \u003c 18.09.2) - Container Breakout (1)","type":"local","platform":"linux","date":"2019-02-12","url":"https://www.exploit-db.com/exploits/46359"},{"source":"pocgithub","id":"q3k/cve-2019-5736-poc","title":"q3k/cve-2019-5736-poc","date":"2019-02-12","url":"https://github.com/q3k/cve-2019-5736-poc"},{"source":"exploitdb","id":"EDB-46369","title":"runc \u003c 1.0-rc6 (Docker \u003c 18.09.2) - Container Breakout (2)","type":"local","platform":"linux","date":"2019-02-13","url":"https://www.exploit-db.com/exploits/46369"},{"source":"pocgithub","id":"Frichetten/CVE-2019-5736-PoC","title":"Frichetten/CVE-2019-5736-PoC","date":"2019-02-13","url":"https://github.com/Frichetten/CVE-2019-5736-PoC"},{"source":"pocgithub","id":"jas502n/CVE-2019-5736","title":"jas502n/CVE-2019-5736","date":"2019-02-14","url":"https://github.com/jas502n/CVE-2019-5736"},{"source":"pocgithub","id":"likekabin/CVE-2019-5736","title":"likekabin/CVE-2019-5736","date":"2019-02-14","url":"https://github.com/likekabin/CVE-2019-5736"},{"source":"pocgithub","id":"likekabin/cve-2019-5736-poc","title":"likekabin/cve-2019-5736-poc","date":"2019-02-14","url":"https://github.com/likekabin/cve-2019-5736-poc"},{"source":"pocgithub","id":"agppp/cve-2019-5736-poc","title":"agppp/cve-2019-5736-poc","date":"2019-02-15","url":"https://github.com/agppp/cve-2019-5736-poc"},{"source":"pocgithub","id":"b3d3c/poc-cve-2019-5736","title":"b3d3c/poc-cve-2019-5736","date":"2019-02-19","url":"https://github.com/b3d3c/poc-cve-2019-5736"},{"source":"pocgithub","id":"twistlock/RunC-CVE-2019-5736","title":"twistlock/RunC-CVE-2019-5736","date":"2019-02-20","url":"https://github.com/twistlock/RunC-CVE-2019-5736"},{"source":"pocgithub","id":"yyqs2008/CVE-2019-5736-PoC-2","title":"yyqs2008/CVE-2019-5736-PoC-2","date":"2019-02-28","url":"https://github.com/yyqs2008/CVE-2019-5736-PoC-2"},{"source":"pocgithub","id":"stillan00b/CVE-2019-5736","title":"stillan00b/CVE-2019-5736","date":"2019-03-27","url":"https://github.com/stillan00b/CVE-2019-5736"},{"source":"pocgithub","id":"milloni/cve-2019-5736-exp","title":"milloni/cve-2019-5736-exp","date":"2019-04-13","url":"https://github.com/milloni/cve-2019-5736-exp"},{"source":"pocgithub","id":"panzouh/Docker-Runc-Exploit","title":"panzouh/Docker-Runc-Exploit","date":"2019-05-09","url":"https://github.com/panzouh/Docker-Runc-Exploit"},{"source":"pocgithub","id":"RyanNgWH/CVE-2019-5736-POC","title":"RyanNgWH/CVE-2019-5736-POC","date":"2019-06-30","url":"https://github.com/RyanNgWH/CVE-2019-5736-POC"},{"source":"pocgithub","id":"Lee-SungYoung/cve-2019-5736-study","title":"Lee-SungYoung/cve-2019-5736-study","date":"2019-08-05","url":"https://github.com/Lee-SungYoung/cve-2019-5736-study"},{"source":"pocgithub","id":"h-wookie/cve-2019-5736-poc","title":"h-wookie/cve-2019-5736-poc","date":"2019-10-12","url":"https://github.com/h-wookie/cve-2019-5736-poc"},{"source":"pocgithub","id":"epsteina16/Docker-Escape-Miner","title":"epsteina16/Docker-Escape-Miner","date":"2019-12-12","url":"https://github.com/epsteina16/Docker-Escape-Miner"},{"source":"pocgithub","id":"geropl/CVE-2019-5736","title":"geropl/CVE-2019-5736","date":"2020-01-08","url":"https://github.com/geropl/CVE-2019-5736"},{"source":"pocgithub","id":"GiverOfGifts/CVE-2019-5736-Custom-Runtime","title":"GiverOfGifts/CVE-2019-5736-Custom-Runtime","date":"2020-02-04","url":"https://github.com/GiverOfGifts/CVE-2019-5736-Custom-Runtime"},{"source":"pocgithub","id":"Billith/CVE-2019-5736-PoC","title":"Billith/CVE-2019-5736-PoC","date":"2020-05-01","url":"https://github.com/Billith/CVE-2019-5736-PoC"},{"source":"pocgithub","id":"BBRathnayaka/POC-CVE-2019-5736","title":"BBRathnayaka/POC-CVE-2019-5736","date":"2020-05-10","url":"https://github.com/BBRathnayaka/POC-CVE-2019-5736"},{"source":"pocgithub","id":"shen54/IT19172088","title":"shen54/IT19172088","date":"2020-05-12","url":"https://github.com/shen54/IT19172088"},{"source":"pocgithub","id":"h3x0v3rl0rd/CVE-2019-5736","title":"h3x0v3rl0rd/CVE-2019-5736","date":"2021-07-08","url":"https://github.com/h3x0v3rl0rd/CVE-2019-5736"},{"source":"pocgithub","id":"fahmifj/Docker-breakout-runc","title":"fahmifj/Docker-breakout-runc","date":"2021-08-07","url":"https://github.com/fahmifj/Docker-breakout-runc"},{"source":"pocgithub","id":"takumak/cve-2019-5736-reproducer","title":"takumak/cve-2019-5736-reproducer","date":"2022-03-02","url":"https://github.com/takumak/cve-2019-5736-reproducer"},{"source":"pocgithub","id":"si1ent-le/CVE-2019-5736","title":"si1ent-le/CVE-2019-5736","date":"2022-03-16","url":"https://github.com/si1ent-le/CVE-2019-5736"}],"exploits_more":3,"fixes":[{"ecosystem":"Alpine:v3.9","package":"flatpak","fixed_in":["1.0.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.10","package":"lxc","fixed_in":["3.1.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"lxc","fixed_in":["3.1.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"lxc","fixed_in":["3.1.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"lxc","fixed_in":["3.1.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"lxc","fixed_in":["3.1.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"lxc","fixed_in":["3.1.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"lxc","fixed_in":["3.1.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"lxc","fixed_in":["3.1.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"lxc","fixed_in":["3.1.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"lxc","fixed_in":["3.1.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"lxc","fixed_in":["3.1.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"lxc","fixed_in":["3.1.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"lxc","fixed_in":["3.1.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"lxc","fixed_in":["3.1.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"lxc","fixed_in":["3.1.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"lxc","fixed_in":["3.1.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.10","package":"runc","fixed_in":["1.0.0_rc7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"runc","fixed_in":["1.0.0_rc7"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"runc","fixed_in":["1.0.0_rc7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"runc","fixed_in":["1.0.0_rc7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"runc","fixed_in":["1.0.0_rc7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"runc","fixed_in":["1.0.0_rc7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"runc","fixed_in":["1.0.0_rc7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"runc","fixed_in":["1.0.0_rc7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"runc","fixed_in":["1.0.0_rc7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"runc","fixed_in":["1.0.0_rc7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"runc","fixed_in":["1.0.0_rc7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"runc","fixed_in":["1.0.0_rc7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"runc","fixed_in":["1.0.0_rc7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"runc","fixed_in":["1.0.0_rc7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"runc","fixed_in":["1.0.0_rc7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"runc","fixed_in":["1.0.0_rc6-r1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"oci-systemd-hook","fixed_in":["1:0.1.15-2.git2d0b8a3.module_el8.5.0+119+9a9ec082","1:0.1.15-2.git2d0b8a3.module_el8.4.0+2496+12421f43","1:0.1.15-2.git2d0b8a3.module_el8.3.0+2044+12421f43"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"oci-umount","fixed_in":["2:2.3.4-2.git87f9237.module_el8.5.0+119+9a9ec082","2:2.3.4-2.git87f9237.module_el8.4.0+2496+12421f43","2:2.3.4-2.git87f9237.module_el8.3.0+2044+12421f43"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"lxc","fixed_in":["1:3.1.0+really3.0.3-4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"lxc","fixed_in":["1:3.1.0+really3.0.3-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"lxc","fixed_in":["1:3.1.0+really3.0.3-4"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"runc","fixed_in":["1.0.0~rc6+dfsg1-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"runc","fixed_in":["1.0.0~rc6+dfsg1-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"runc","fixed_in":["1.0.0~rc6+dfsg1-2"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"opencontainers-runc","fixed_in":["1.0.0rc5-3.2.mga6"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"lxc","fixed_in":["2.0.8-1.1.mga6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_extras_other:7","package":"runc","fixed_in":["0:1.0.0-59.dev.git2abd837.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_extras_other:7","package":"runc-debuginfo","fixed_in":["0:1.0.0-59.dev.git2abd837.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_extras_other:7","package":"docker","fixed_in":["2:1.13.1-91.git07f3374.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_extras_other:7","package":"docker-client","fixed_in":["2:1.13.1-91.git07f3374.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_extras_other:7","package":"docker-common","fixed_in":["2:1.13.1-91.git07f3374.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_extras_other:7","package":"docker-debuginfo","fixed_in":["2:1.13.1-91.git07f3374.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_extras_other:7","package":"docker-logrotate","fixed_in":["2:1.13.1-91.git07f3374.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_extras_other:7","package":"docker-lvm-plugin","fixed_in":["2:1.13.1-91.git07f3374.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_extras_other:7","package":"docker-novolume-plugin","fixed_in":["2:1.13.1-91.git07f3374.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_extras_other:7","package":"docker-rhel-push-plugin","fixed_in":["2:1.13.1-91.git07f3374.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_extras_other:7","package":"docker-v1.10-migrator","fixed_in":["2:1.13.1-91.git07f3374.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.4::el7","package":"docker","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.4::el7","package":"docker-client","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.4::el7","package":"docker-common","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.4::el7","package":"docker-debuginfo","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.4::el7","package":"docker-logrotate","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.4::el7","package":"docker-lvm-plugin","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.4::el7","package":"docker-novolume-plugin","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.4::el7","package":"docker-rhel-push-plugin","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.4::el7","package":"docker-unit-test","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.4::el7","package":"docker-v1.10-migrator","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.5::el7","package":"docker","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.5::el7","package":"docker-client","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.5::el7","package":"docker-common","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.5::el7","package":"docker-debuginfo","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.5::el7","package":"docker-logrotate","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.5::el7","package":"docker-lvm-plugin","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.5::el7","package":"docker-novolume-plugin","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.5::el7","package":"docker-rhel-push-plugin","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.5::el7","package":"docker-unit-test","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.5::el7","package":"docker-v1.10-migrator","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.6::el7","package":"docker","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.6::el7","package":"docker-client","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.6::el7","package":"docker-common","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.6::el7","package":"docker-debuginfo","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.6::el7","package":"docker-logrotate","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.6::el7","package":"docker-lvm-plugin","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.6::el7","package":"docker-novolume-plugin","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.6::el7","package":"docker-rhel-push-plugin","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.6::el7","package":"docker-unit-test","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.6::el7","package":"docker-v1.10-migrator","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.7::el7","package":"docker","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.7::el7","package":"docker-client","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.7::el7","package":"docker-common","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.7::el7","package":"docker-debuginfo","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.7::el7","package":"docker-logrotate","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.7::el7","package":"docker-lvm-plugin","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.7::el7","package":"docker-novolume-plugin","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.7::el7","package":"docker-rhel-push-plugin","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.7::el7","package":"docker-unit-test","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.7::el7","package":"docker-v1.10-migrator","fixed_in":["2:1.12.6-79.git5680db5.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah","fixed_in":["0:1.5-3.gite94b4f9.module+el8.0.0+2958+4e823551"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debuginfo","fixed_in":["0:1.5-3.gite94b4f9.module+el8.0.0+2958+4e823551"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debugsource","fixed_in":["0:1.5-3.gite94b4f9.module+el8.0.0+2958+4e823551"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"container-selinux","fixed_in":["2:2.94-1.git1e99f1d.module+el8.0.0+2958+4e823551"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins","fixed_in":["0:0.7.4-3.git9ebe139.module+el8.0.0+2958+4e823551"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debuginfo","fixed_in":["0:0.7.4-3.git9ebe139.module+el8.0.0+2958+4e823551"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debugsource","fixed_in":["0:0.7.4-3.git9ebe139.module+el8.0.0+2958+4e823551"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containers-common","fixed_in":["1:0.1.32-3.git1715c90.module+el8.0.0+2958+4e823551"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs","fixed_in":["0:0.3-2.module+el8.0.0+2958+4e823551"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debuginfo","fixed_in":["0:0.3-2.module+el8.0.0+2958+4e823551"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debugsource","fixed_in":["0:0.3-2.module+el8.0.0+2958+4e823551"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-systemd-hook","fixed_in":["1:0.1.15-2.git2d0b8a3.module+el8.0.0+2958+4e823551"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-systemd-hook-debuginfo","fixed_in":["1:0.1.15-2.git2d0b8a3.module+el8.0.0+2958+4e823551"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-systemd-hook-debugsource","fixed_in":["1:0.1.15-2.git2d0b8a3.module+el8.0.0+2958+4e823551"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-umount","fixed_in":["2:2.3.4-2.git87f9237.module+el8.0.0+2958+4e823551"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-umount-debuginfo","fixed_in":["2:2.3.4-2.git87f9237.module+el8.0.0+2958+4e823551"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-umount-debugsource","fixed_in":["2:2.3.4-2.git87f9237.module+el8.0.0+2958+4e823551"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman","fixed_in":["0:1.0.0-2.git921f98f.module+el8.0.0+2958+4e823551"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debuginfo","fixed_in":["0:1.0.0-2.git921f98f.module+el8.0.0+2958+4e823551"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debugsource","fixed_in":["0:1.0.0-2.git921f98f.module+el8.0.0+2958+4e823551"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-docker","fixed_in":["0:1.0.0-2.git921f98f.module+el8.0.0+2958+4e823551"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc","fixed_in":["0:1.0.0-55.rc5.dev.git2abd837.module+el8.0.0+3049+59fd2bba"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debuginfo","fixed_in":["0:1.0.0-55.rc5.dev.git2abd837.module+el8.0.0+3049+59fd2bba"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debugsource","fixed_in":["0:1.0.0-55.rc5.dev.git2abd837.module+el8.0.0+3049+59fd2bba"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo","fixed_in":["1:0.1.32-3.git1715c90.module+el8.0.0+2958+4e823551"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-debuginfo","fixed_in":["1:0.1.32-3.git1715c90.module+el8.0.0+2958+4e823551"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-debugsource","fixed_in":["1:0.1.32-3.git1715c90.module+el8.0.0+2958+4e823551"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns","fixed_in":["0:0.1-2.dev.gitc4e1bc5.module+el8.0.0+2958+4e823551"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debuginfo","fixed_in":["0:0.1-2.dev.gitc4e1bc5.module+el8.0.0+2958+4e823551"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debugsource","fixed_in":["0:0.1-2.dev.gitc4e1bc5.module+el8.0.0+2958+4e823551"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"oci-systemd-hook","fixed_in":["1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"oci-umount","fixed_in":["2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Containers 15","package":"docker-runc","fixed_in":["1.0.0rc5+gitr3562_69663f0bd4b6-6.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 6-LTSS","package":"docker-runc","fixed_in":["1.0.0rc5+gitr3562_69663f0bd4b6-1.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Containers 12","package":"docker-runc","fixed_in":["1.0.0rc5+gitr3562_69663f0bd4b6-1.9.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"docker.io","fixed_in":["18.06.1-0ubuntu1.2~16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"runc","fixed_in":["1.0.0~rc2+docker1.13.1-0ubuntu1~16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"docker.io","fixed_in":["18.06.1-0ubuntu1.2~18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"runc","fixed_in":["1.0.0~rc4+dfsg1-6ubuntu0.18.04.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"lxc","fixed_in":["3.2.1-lp151.4.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP1","package":"lxc","fixed_in":["3.2.1-bp151.5.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.9","package":"flatpak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.10","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.10","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0_rc7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0_rc7"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0_rc7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0_rc7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0_rc7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0_rc7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0_rc7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0_rc7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0_rc7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0_rc7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0_rc7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0_rc7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0_rc7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0_rc7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0_rc7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0_rc6-r1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"oci-systemd-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.15-2.git2d0b8a3.module_el8.5.0+119+9a9ec082"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"oci-systemd-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.15-2.git2d0b8a3.module_el8.4.0+2496+12421f43"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"oci-systemd-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.15-2.git2d0b8a3.module_el8.3.0+2044+12421f43"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"oci-umount","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.3.4-2.git87f9237.module_el8.5.0+119+9a9ec082"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"oci-umount","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.3.4-2.git87f9237.module_el8.4.0+2496+12421f43"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"oci-umount","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.3.4-2.git87f9237.module_el8.3.0+2044+12421f43"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1.0+really3.0.3-4"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1.0+really3.0.3-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1.0+really3.0.3-4"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0~rc6+dfsg1-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0~rc6+dfsg1-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0~rc6+dfsg1-2"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"opencontainers-runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0rc5-3.2.mga6"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.8-1.1.mga6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-59.dev.git2abd837.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-59.dev.git2abd837.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.13.1-91.git07f3374.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"docker-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.13.1-91.git07f3374.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"docker-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.13.1-91.git07f3374.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"docker-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.13.1-91.git07f3374.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"docker-logrotate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.13.1-91.git07f3374.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"docker-lvm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.13.1-91.git07f3374.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"docker-novolume-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.13.1-91.git07f3374.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"docker-rhel-push-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.13.1-91.git07f3374.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"docker-v1.10-migrator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.13.1-91.git07f3374.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.4::el7","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.4::el7","package":"docker-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.4::el7","package":"docker-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.4::el7","package":"docker-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.4::el7","package":"docker-logrotate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.4::el7","package":"docker-lvm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.4::el7","package":"docker-novolume-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.4::el7","package":"docker-rhel-push-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.4::el7","package":"docker-unit-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.4::el7","package":"docker-v1.10-migrator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.5::el7","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.5::el7","package":"docker-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.5::el7","package":"docker-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.5::el7","package":"docker-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.5::el7","package":"docker-logrotate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.5::el7","package":"docker-lvm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.5::el7","package":"docker-novolume-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.5::el7","package":"docker-rhel-push-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.5::el7","package":"docker-unit-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.5::el7","package":"docker-v1.10-migrator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.6::el7","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.6::el7","package":"docker-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.6::el7","package":"docker-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.6::el7","package":"docker-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.6::el7","package":"docker-logrotate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.6::el7","package":"docker-lvm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.6::el7","package":"docker-novolume-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.6::el7","package":"docker-rhel-push-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.6::el7","package":"docker-unit-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.6::el7","package":"docker-v1.10-migrator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.7::el7","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.7::el7","package":"docker-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.7::el7","package":"docker-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.7::el7","package":"docker-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.7::el7","package":"docker-logrotate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.7::el7","package":"docker-lvm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.7::el7","package":"docker-novolume-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.7::el7","package":"docker-rhel-push-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.7::el7","package":"docker-unit-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.7::el7","package":"docker-v1.10-migrator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.12.6-79.git5680db5.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5-3.gite94b4f9.module+el8.0.0+2958+4e823551"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5-3.gite94b4f9.module+el8.0.0+2958+4e823551"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5-3.gite94b4f9.module+el8.0.0+2958+4e823551"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.94-1.git1e99f1d.module+el8.0.0+2958+4e823551"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.4-3.git9ebe139.module+el8.0.0+2958+4e823551"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.4-3.git9ebe139.module+el8.0.0+2958+4e823551"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.4-3.git9ebe139.module+el8.0.0+2958+4e823551"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.32-3.git1715c90.module+el8.0.0+2958+4e823551"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3-2.module+el8.0.0+2958+4e823551"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3-2.module+el8.0.0+2958+4e823551"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3-2.module+el8.0.0+2958+4e823551"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-systemd-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.15-2.git2d0b8a3.module+el8.0.0+2958+4e823551"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-systemd-hook-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.15-2.git2d0b8a3.module+el8.0.0+2958+4e823551"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-systemd-hook-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.15-2.git2d0b8a3.module+el8.0.0+2958+4e823551"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-umount","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.3.4-2.git87f9237.module+el8.0.0+2958+4e823551"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-umount-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.3.4-2.git87f9237.module+el8.0.0+2958+4e823551"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-umount-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.3.4-2.git87f9237.module+el8.0.0+2958+4e823551"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-2.git921f98f.module+el8.0.0+2958+4e823551"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-2.git921f98f.module+el8.0.0+2958+4e823551"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-2.git921f98f.module+el8.0.0+2958+4e823551"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-2.git921f98f.module+el8.0.0+2958+4e823551"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-55.rc5.dev.git2abd837.module+el8.0.0+3049+59fd2bba"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-55.rc5.dev.git2abd837.module+el8.0.0+3049+59fd2bba"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-55.rc5.dev.git2abd837.module+el8.0.0+3049+59fd2bba"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.32-3.git1715c90.module+el8.0.0+2958+4e823551"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.32-3.git1715c90.module+el8.0.0+2958+4e823551"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.32-3.git1715c90.module+el8.0.0+2958+4e823551"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1-2.dev.gitc4e1bc5.module+el8.0.0+2958+4e823551"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1-2.dev.gitc4e1bc5.module+el8.0.0+2958+4e823551"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1-2.dev.gitc4e1bc5.module+el8.0.0+2958+4e823551"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-systemd-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-umount","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15","package":"docker-runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0rc5+gitr3562_69663f0bd4b6-6.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6-LTSS","package":"docker-runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0rc5+gitr3562_69663f0bd4b6-1.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 12","package":"docker-runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0rc5+gitr3562_69663f0bd4b6-1.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-5.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.09.1_ce-6.14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15","package":"docker-runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0rc6+gitr3748_96ec2177ae84-6.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15","package":"golang-github-docker-libnetwork","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0.1+gitr2711_2cfbf9b1f981-4.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6-LTSS","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-16.14.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.09.1_ce-98.34.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6-LTSS","package":"docker-runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0rc6+gitr3748_96ec2177ae84-1.17.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6-LTSS","package":"golang-github-docker-libnetwork","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0.1+gitr2711_2cfbf9b1f981-16.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 12","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-16.14.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 12","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.09.1_ce-98.34.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 12","package":"docker-runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0rc6+gitr3748_96ec2177ae84-1.17.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 12","package":"golang-github-docker-libnetwork","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0.1+gitr2711_2cfbf9b1f981-16.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-5.13.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.09.6_ce-6.17.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15","package":"docker-runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0rc6+gitr3804_2b18fe1d885e-6.18.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15","package":"golang-github-docker-libnetwork","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0.1+gitr2726_872f0a83c98a-4.12.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP1","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-5.13.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP1","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.09.6_ce-6.17.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP1","package":"docker-runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0rc6+gitr3804_2b18fe1d885e-6.18.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP1","package":"golang-github-docker-libnetwork","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0.1+gitr2726_872f0a83c98a-4.12.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-5.16.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.03.1_ce-6.26.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15","package":"docker-runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0rc8+gitr3826_425e105d5a03-6.21.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15","package":"golang-github-docker-libnetwork","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0.1+gitr2800_fc5a7d91d54c-4.15.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP1","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-5.16.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP1","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.03.1_ce-6.26.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP1","package":"docker-runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0rc8+gitr3826_425e105d5a03-6.21.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP1","package":"golang-github-docker-libnetwork","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0.1+gitr2800_fc5a7d91d54c-4.15.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6-LTSS","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-16.23.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.03.1_ce-98.46.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6-LTSS","package":"docker-runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0rc8+gitr3826_425e105d5a03-1.29.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6-LTSS","package":"golang-github-docker-libnetwork","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0.1+gitr2800_fc5a7d91d54c-25.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 12","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-16.23.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 12","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.03.1_ce-98.46.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 12","package":"docker-runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0rc8+gitr3826_425e105d5a03-1.29.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 12","package":"golang-github-docker-libnetwork","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0.1+gitr2800_fc5a7d91d54c-25.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 12","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4-16.38.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 12","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.10.6_ce-98.66.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 12","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0~rc93-16.8.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"docker.io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.06.1-0ubuntu1.2~16.04.1"}]}],"versions":["1.6.2~dfsg1-1ubuntu4","1.10.2-0ubuntu3","1.10.2-0ubuntu4","1.10.3-0ubuntu1","1.10.3-0ubuntu4","1.10.3-0ubuntu5","1.10.3-0ubuntu6","1.11.2-0ubuntu5~16.04","1.12.1-0ubuntu13~16.04.1","1.12.3-0ubuntu4~16.04.2","1.12.6-0ubuntu1~16.04.1","1.13.1-0ubuntu1~16.04.2","17.03.2-0ubuntu2~16.04.1","18.06.1-0ubuntu1~16.04.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0~rc2+docker1.13.1-0ubuntu1~16.04.1"}]}],"versions":["0.0.8+dfsg-2","0.1.1-0ubuntu5~16.04","1.0.0~rc1-0ubuntu1~16.04","1.0.0~rc1-0ubuntu2~16.04.1","1.0.0~rc1-0ubuntu2~16.04.1.1","1.0.0~rc2-0ubuntu2~16.04.1","1.0.0~rc2+docker1.12.6-0ubuntu1~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"docker.io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.06.1-0ubuntu1.2~18.04.1"}]}],"versions":["1.13.1-0ubuntu6","17.03.2-0ubuntu1","17.03.2-0ubuntu3","17.03.2-0ubuntu5","17.12.1-0ubuntu1","18.06.1-0ubuntu1~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0~rc4+dfsg1-6ubuntu0.18.04.1"}]}],"versions":["1.0.0~rc2+docker1.13.1-0ubuntu1","1.0.0~rc4+dfsg1-2","1.0.0~rc4+dfsg1-6"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"docker.io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.09.7-0ubuntu1~16.04.4"}]}],"versions":["1.6.2~dfsg1-1ubuntu4","1.10.2-0ubuntu3","1.10.2-0ubuntu4","1.10.3-0ubuntu1","1.10.3-0ubuntu4","1.10.3-0ubuntu5","1.10.3-0ubuntu6","1.11.2-0ubuntu5~16.04","1.12.1-0ubuntu13~16.04.1","1.12.3-0ubuntu4~16.04.2","1.12.6-0ubuntu1~16.04.1","1.13.1-0ubuntu1~16.04.2","17.03.2-0ubuntu2~16.04.1","18.06.1-0ubuntu1~16.04.2","18.06.1-0ubuntu1.2~16.04.1","18.09.2-0ubuntu1~16.04.1","18.09.5-0ubuntu1~16.04.2","18.09.7-0ubuntu1~16.04.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"docker.io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.09.7-0ubuntu1~18.04.3"}]}],"versions":["1.13.1-0ubuntu6","17.03.2-0ubuntu1","17.03.2-0ubuntu3","17.03.2-0ubuntu5","17.12.1-0ubuntu1","18.06.1-0ubuntu1~18.04.1","18.06.1-0ubuntu1.2~18.04.1","18.09.2-0ubuntu1~18.04.1","18.09.5-0ubuntu1~18.04.2","18.09.7-0ubuntu1~18.04.1"],"bundled":2},{"source":"osv","ecosystem":"SUSE:Package Hub 15","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0~rc6-bp150.2.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Package Hub 15","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-bp150.5.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Package Hub 15","package":"lxcfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3-bp150.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-lp150.2.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"lxcfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3-lp150.2.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-lp151.2.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.09.6_ce-lp151.2.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"docker-runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0rc6+gitr3804_2b18fe1d885e-lp151.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12-lp151.2.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"go1.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.9-lp151.2.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"go1.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.4-lp151.2.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"golang-github-docker-libnetwork","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0.1+gitr2726_872f0a83c98a-lp151.2.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-lp150.4.14.3"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.09.6_ce-lp150.5.17.2"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"docker-runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0rc6+gitr3804_2b18fe1d885e-lp150.5.21.2"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12-lp150.2.11.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"go1.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.9-lp150.9.3"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"go1.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.4-lp150.2.2"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"golang-github-docker-libnetwork","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0.1+gitr2726_872f0a83c98a-lp150.3.14.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Package Hub 15","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12-bp150.2.6.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-lp151.2.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.03.1_ce-lp151.2.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"docker-runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0rc8+gitr3826_425e105d5a03-lp151.3.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"golang-github-docker-libnetwork","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0.1+gitr2800_fc5a7d91d54c-lp151.2.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-lp151.2.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.03.1_ce-lp151.2.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"docker-runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0rc8+gitr3826_425e105d5a03-lp151.3.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"golang-github-docker-libnetwork","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0.1+gitr2800_fc5a7d91d54c-lp151.2.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.1-lp151.4.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP1","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.1-bp151.5.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.8-2.2"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"flatpak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.3-1.2"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-1.2"}]}],"bundled":8}],"products":[{"vendor":"apache","product":"mesos"},{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"d2iq","product":"dc\\/os"},{"vendor":"d2iq","product":"kubernetes_engine"},{"vendor":"docker","product":"docker"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"google","product":"kubernetes_engine"},{"vendor":"hp","product":"onesphere"},{"vendor":"linuxcontainers","product":"lxc"},{"vendor":"linuxfoundation","product":"runc"},{"vendor":"microfocus","product":"service_management_automation"},{"vendor":"netapp","product":"hci_management_node"},{"vendor":"netapp","product":"solidfire"},{"vendor":"opensuse","product":"backports_sle"},{"vendor":"opensuse","product":"leap"},{"vendor":"redhat","product":"container_development_kit"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"openshift"}],"references":[{"url":"https://github.com/opencontainers/runc/commit/6635b4f0c6af3810594d2770f662f34ddc15b40d","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://access.redhat.com/errata/RHSA-2019:0408","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://github.com/rancher/runc-cve","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:0401","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://github.com/docker/docker-ce/releases/tag/v18.09.2","tags":["x_transferred","Release Notes","Third Party Advisory","advisory"]},{"url":"https://www.synology.com/security/advisory/Synology_SA_19_06","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20190307-0008/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:0303","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190215-runc","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://github.com/q3k/cve-2019-5736-poc","tags":["x_transferred","Exploit","Third Party Advisory","evidence"]},{"url":"https://www.exploit-db.com/exploits/46359/","tags":["exploit","x_transferred","Exploit","Third Party Advisory","VDB Entry","evidence"]},{"url":"https://github.com/opencontainers/runc/commit/0a8e4117e7f715d5fbeef398405813ce8e88558b","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://aws.amazon.com/security/security-bulletins/AWS-2019-002/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2019/02/11/2","tags":["x_transferred","Mailing List","Patch","Third Party Advisory","fix","web","report"]},{"url":"https://kubernetes.io/blog/2019/02/11/runc-and-cve-2019-5736/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/security/cve/cve-2019-5736","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.exploit-db.com/exploits/46369/","tags":["exploit","x_transferred","Exploit","Third Party Advisory","VDB Entry","evidence"]},{"url":"https://access.redhat.com/errata/RHSA-2019:0304","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://github.com/Frichetten/CVE-2019-5736-PoC","tags":["x_transferred","Exploit","Third Party Advisory","evidence"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03913en_us","tags":["x_transferred","Permissions Required","report"]},{"url":"https://brauner.github.io/2019/02/12/privileged-containers.html","tags":["x_transferred","Exploit","Technical Description","Third Party Advisory","evidence"]},{"url":"https://www.twistlock.com/2019/02/11/how-to-mitigate-cve-2019-5736-in-runc-and-docker/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://cloud.google.com/kubernetes-engine/docs/security-bulletins#february-11-2019-runc","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/106976","tags":["vdb-entry","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://access.redhat.com/security/vulnerabilities/runcescape","tags":["x_transferred","Third Party Advisory","advisory","article"]},{"url":"https://blog.dragonsector.pl/2019/02/cve-2019-5736-escape-from-docker-and.html","tags":["x_transferred","Exploit","Mitigation","Third Party Advisory","evidence","article"]},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1121967","tags":["x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://lists.apache.org/thread.html/b162dd624dc088cd634292f0402282a1d1d0ce853baeae8205bc033c%40%3Cdev.mesos.apache.org%3E","tags":["mailing-list","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/a258757af84c5074dc7bf932622020fd4f60cef65a84290380386706%40%3Cuser.mesos.apache.org%3E","tags":["mailing-list","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2019/03/23/1","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://support.mesosphere.com/s/article/Known-Issue-Container-Runtime-Vulnerability-MSPH-2019-0003","tags":["x_transferred","Exploit","Patch","Third Party Advisory","fix"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00044.html","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00074.html","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00091.html","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6A4OSFM5GGOWW4ECELV5OHX2XRAUSPH/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWFJGIPYAAAMVSWWI3QWYXGA3ZBU2H4W/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03410944","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:0975","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://azure.microsoft.com/en-us/updates/cve-2019-5736-and-runc-vulnerability/","tags":["x_transferred","Patch","Third Party Advisory","Vendor Advisory","fix"]},{"url":"https://azure.microsoft.com/en-us/updates/iot-edge-fix-cve-2019-5736/","tags":["x_transferred","Patch","Third Party Advisory","Vendor Advisory","fix"]},{"url":"https://lists.apache.org/thread.html/acacf018c12636e41667e94ac0a1e9244e887eef2debdd474640aa6e%40%3Cdev.dlab.apache.org%3E","tags":["mailing-list","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/a585f64d14c31ab393b90c5f17e41d9765a1a17eec63856ce750af46%40%3Cdev.dlab.apache.org%3E","tags":["mailing-list","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00060.html","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00073.html","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00011.html","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00015.html","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2019/06/28/2","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2019/07/06/3","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2019/07/06/4","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/4048-1/","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00084.html","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EGZKRCKI3Y7FMADO2MENMT4TU24QGHFR/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DLC52IOJN6IQJWJ6CUI6AIUP6GVVG2QP/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/24e54e3c6b2259e3903b6b8fe26896ac649c481ea99c5739468c92a3%40%3Cdev.dlab.apache.org%3E","tags":["mailing-list","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00007.html","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00029.html","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2019/10/24/1","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2019/10/29/3","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202003-21","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.apache.org/thread.html/rc494623986d76593873ce5a40dd69cb3629400d10750d5d7e96b8587%40%3Cdev.dlab.apache.org%3E","tags":["mailing-list","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E","tags":["mailing-list","x_transferred","web"]},{"url":"http://packetstormsecurity.com/files/163339/Docker-Container-Escape.html","tags":["x_transferred","Exploit","Third Party Advisory","VDB Entry","evidence"]},{"url":"http://packetstormsecurity.com/files/165197/Docker-runc-Command-Execution-Proof-Of-Concept.html","tags":["x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2024/01/31/6","tags":["mailing-list","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2024/02/01/1","tags":["mailing-list","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2024/02/02/3","tags":["mailing-list","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-5736","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/24e54e3c6b2259e3903b6b8fe26896ac649c481ea99c5739468c92a3@%3Cdev.dlab.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/a258757af84c5074dc7bf932622020fd4f60cef65a84290380386706@%3Cuser.mesos.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/a585f64d14c31ab393b90c5f17e41d9765a1a17eec63856ce750af46@%3Cdev.dlab.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/acacf018c12636e41667e94ac0a1e9244e887eef2debdd474640aa6e@%3Cdev.dlab.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/b162dd624dc088cd634292f0402282a1d1d0ce853baeae8205bc033c@%3Cdev.mesos.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rc494623986d76593873ce5a40dd69cb3629400d10750d5d7e96b8587@%3Cdev.dlab.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2@%3Cissues.geode.apache.org%3E"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DLC52IOJN6IQJWJ6CUI6AIUP6GVVG2QP/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EGZKRCKI3Y7FMADO2MENMT4TU24QGHFR/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SWFJGIPYAAAMVSWWI3QWYXGA3ZBU2H4W/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6A4OSFM5GGOWW4ECELV5OHX2XRAUSPH/"},{"url":"https://github.com/advisories/GHSA-gxmr-w5mj-v8hh"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-5736","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/1664908","tags":["report"]},{"url":"https://bugzilla.redhat.com/1693675","tags":["report"]},{"url":"https://bugzilla.redhat.com/1695669","tags":["report"]},{"url":"https://bugzilla.redhat.com/1695689","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2019-0975.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2019-5736","tags":["report"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2019-5736","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-5736","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0068.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=24253","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/SMFQ54VEZPJT4H2C2TBILCPDX2VMAIZ2/","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2019-0087.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=24350","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1664908","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0303.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-5736","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-5736","tags":["advisory","report"]},{"url":"https://seclists.org/oss-sec/2019/q1/119","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0304.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0408.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693675","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1695669","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1695689","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0975.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2019:0975","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190362-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1121967","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5736","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190385-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190495-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1048046","tags":["report"]},{"url":"https://bugzilla.suse.com/1051429","tags":["report"]},{"url":"https://bugzilla.suse.com/1114832","tags":["report"]},{"url":"https://bugzilla.suse.com/1118897","tags":["report"]},{"url":"https://bugzilla.suse.com/1118898","tags":["report"]},{"url":"https://bugzilla.suse.com/1118899","tags":["report"]},{"url":"https://bugzilla.suse.com/1124308","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16873","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16875","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190573-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1001161","tags":["report"]},{"url":"https://bugzilla.suse.com/1112980","tags":["report"]},{"url":"https://bugzilla.suse.com/1121412","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9962","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191234-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1114209","tags":["report"]},{"url":"https://bugzilla.suse.com/1121397","tags":["report"]},{"url":"https://bugzilla.suse.com/1123013","tags":["report"]},{"url":"https://bugzilla.suse.com/1128376","tags":["report"]},{"url":"https://bugzilla.suse.com/1128746","tags":["report"]},{"url":"https://bugzilla.suse.com/1134068","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6486","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191234-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192117-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1100331","tags":["report"]},{"url":"https://bugzilla.suse.com/1138920","tags":["report"]},{"url":"https://bugzilla.suse.com/1139649","tags":["report"]},{"url":"https://bugzilla.suse.com/1142160","tags":["report"]},{"url":"https://bugzilla.suse.com/1142413","tags":["report"]},{"url":"https://bugzilla.suse.com/1143409","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14271","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192119-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211458-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1028638","tags":["report"]},{"url":"https://bugzilla.suse.com/1034053","tags":["report"]},{"url":"https://bugzilla.suse.com/1053532","tags":["report"]},{"url":"https://bugzilla.suse.com/1095817","tags":["report"]},{"url":"https://bugzilla.suse.com/1131314","tags":["report"]},{"url":"https://bugzilla.suse.com/1131553","tags":["report"]},{"url":"https://bugzilla.suse.com/1149954","tags":["report"]},{"url":"https://bugzilla.suse.com/1152308","tags":["report"]},{"url":"https://bugzilla.suse.com/1160452","tags":["report"]},{"url":"https://bugzilla.suse.com/1168481","tags":["report"]},{"url":"https://bugzilla.suse.com/1175081","tags":["report"]},{"url":"https://bugzilla.suse.com/1175821","tags":["report"]},{"url":"https://bugzilla.suse.com/1181594","tags":["report"]},{"url":"https://bugzilla.suse.com/1181641","tags":["report"]},{"url":"https://bugzilla.suse.com/1181677","tags":["report"]},{"url":"https://bugzilla.suse.com/1181730","tags":["report"]},{"url":"https://bugzilla.suse.com/1181732","tags":["report"]},{"url":"https://bugzilla.suse.com/1181749","tags":["report"]},{"url":"https://bugzilla.suse.com/1182451","tags":["report"]},{"url":"https://bugzilla.suse.com/1182476","tags":["report"]},{"url":"https://bugzilla.suse.com/1182947","tags":["report"]},{"url":"https://bugzilla.suse.com/1183024","tags":["report"]},{"url":"https://bugzilla.suse.com/1183397","tags":["report"]},{"url":"https://bugzilla.suse.com/1183855","tags":["report"]},{"url":"https://bugzilla.suse.com/1184768","tags":["report"]},{"url":"https://bugzilla.suse.com/1184962","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19921","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21334","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2019-5736","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4048-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-15664","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/K5SY7VBRVPPL5WRVFFIC7CSECFNB3NGY/#K5SY7VBRVPPL5WRVFFIC7CSECFNB3NGY","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VC6NILQ66VPYH6KMNXONQWSWQWZS3YDD/#VC6NILQ66VPYH6KMNXONQWSWQWZS3YDD","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AI7D322XZTMFQDYTMYTY3DCVO2XVUVKB/#AI7D322XZTMFQDYTMYTY3DCVO2XVUVKB","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UBFTSNKGB464HWO65FTEXANGAGVXV4XW/#UBFTSNKGB464HWO65FTEXANGAGVXV4XW","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/P7UGXMWDCAJUCRFVZRWEYVPQASYUPVO4/#P7UGXMWDCAJUCRFVZRWEYVPQASYUPVO4","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1122185","tags":["report"]},{"url":"https://bugzilla.suse.com/1131762","tags":["report"]},{"url":"https://bugzilla.suse.com/988348","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6556","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BJSZ5D42JWJHGJ7ILFBWQ7TUHJTZDYJB/#BJSZ5D42JWJHGJ7ILFBWQ7TUHJTZDYJB","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CER2ESZ3IMKBBAWOVTY65MHSHQAI2UVB/#CER2ESZ3IMKBBAWOVTY65MHSHQAI2UVB","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IF5UCHNMLYYGABZ53J2EKXLMRHH3UVO3/#IF5UCHNMLYYGABZ53J2EKXLMRHH3UVO3","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HM6FFITESF23XEYSCI7KTKZVCPQU2CMO/#HM6FFITESF23XEYSCI7KTKZVCPQU2CMO","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/22XH5BZGCHAOESP2KM3ZT4XHBXIVMEZK/#22XH5BZGCHAOESP2KM3ZT4XHBXIVMEZK","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZEKPXAULRUSJYU4B66UDTT35NKPZHFT6/#ZEKPXAULRUSJYU4B66UDTT35NKPZHFT6","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VMNKFT3TORLGIZACMW6N6GUJJYTXUZZU/#VMNKFT3TORLGIZACMW6N6GUJJYTXUZZU","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15257","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-32760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5226","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-30465","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-5736","description":"runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to /proc/self/exe.","status":"published","published":"2019-02-11T00:00:00Z","modified":"2024-08-04T20:01:52.208Z","updated_at":"2026-11-02T14:20:18.746972Z"}],"euvd":[{"id":"EUVD-2019-15309","description":"runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to /proc/self/exe.","status":"published","published":"2019-02-11T00:00:00Z","modified":"2024-08-04T20:01:52Z","updated_at":"2026-11-03T03:06:51.340672Z"}],"ghsa":[{"id":"GHSA-gxmr-w5mj-v8hh","title":"runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to...","description":"runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to /proc/self/exe.","status":"published","published":"2022-05-13T01:04:26Z","modified":"2024-02-11T05:08:02Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:55:35.698137Z"}],"nvd":[{"id":"CVE-2019-5736","description":"runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to /proc/self/exe.","status":"published","published":"2019-02-11T19:29:00.297Z","modified":"2026-06-17T02:38:07.5Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:05:04.689371Z"}],"osv":[{"id":"ALPINE-CVE-2019-5736","description":"runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to /proc/self/exe.","status":"published","published":"2019-02-11T19:29:00.297Z","modified":"2026-11-03T06:31:59.212338359Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:18:15.355745Z"},{"id":"BELL-CVE-2019-5736","title":"CVE-2019-5736 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:13:52.923093Z","modified":"2026-01-26T09:50:13.071359Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"CVE-2019-5736","description":"runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to /proc/self/exe.","status":"published","published":"2019-02-11T19:29:00.297Z","modified":"2026-10-24T14:06:54.292793693Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:12.675558Z"},{"id":"DEBIAN-CVE-2019-5736","description":"runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to /proc/self/exe.","status":"published","published":"2019-02-11T19:29:00.297Z","modified":"2026-09-21T07:03:20.12241168Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:32.221385Z"},{"id":"RHSA-2019:0303","title":"Red Hat Security Advisory: runc security update","status":"published","published":"2024-09-13T14:08:39Z","modified":"2025-11-22T11:39:35Z","cvss":[{"version":"3.0","score":7.7,"vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2019:0304","title":"Red Hat Security Advisory: docker security update","status":"published","published":"2024-09-13T14:08:52Z","modified":"2025-11-22T11:39:35Z","cvss":[{"version":"3.0","score":7.7,"vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2019:0408","title":"Red Hat Security Advisory: OpenShift Container Platform 3.4, 3.5, 3.6, and 3.7 security update","status":"published","published":"2024-09-13T14:07:52Z","modified":"2025-11-22T11:39:51Z","cvss":[{"version":"3.0","score":7.7,"vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2019:0975","title":"Red Hat Security Advisory: container-tools:rhel8 security and bug fix update","status":"published","published":"2024-09-13T14:07:56Z","modified":"2025-11-22T11:41:18Z","cvss":[{"version":"3.0","score":7.7,"vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RLSA-2019:0975","title":"Important: container-tools:rhel8 security and bug fix update","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* A flaw was found in the way runc handled system file descriptors when running containers. A malicious container could use this flaw to overwrite contents of the runc binary and consequently run arbitrary commands on the container host system. (CVE-2019-5736)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* [stream Rocky Linux8] rebase container-selinux to 2.94 (BZ#1693675)\n\n* [stream Rocky Linux8] unable to mount disk at `/var/lib/containers` via `systemd` unit when `container-selinux` policy installed (BZ#1695669)\n\n* [stream Rocky Linux8] don't allow a container to connect to random services (BZ#1695689)","status":"published","published":"2019-05-07T03:39:11Z","modified":"2026-02-05T10:45:10.476916Z","cvss":[{"version":"3.0","score":7.7,"vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2019-5736","description":"runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to /proc/self/exe.","status":"published","published":"2019-02-11T19:29:00Z","modified":"2026-02-04T02:46:36.170842Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":8.6,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:21.741399Z"},{"id":"ALSA-2019:0975","title":"Important: container-tools:rhel8 security and bug fix update","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* A flaw was found in the way runc handled system file descriptors when running containers. A malicious container could use this flaw to overwrite contents of the runc binary and consequently run arbitrary commands on the container host system. (CVE-2019-5736)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* [stream rhel8] rebase container-selinux to 2.94 (BZ#1693675)\n\n* [stream rhel8] unable to mount disk at `/var/lib/containers` via `systemd` unit when `container-selinux` policy installed (BZ#1695669)\n\n* [stream rhel8] don't allow a container to connect to random services (BZ#1695689)","status":"published","published":"2019-05-07T03:39:11Z","modified":"2026-11-05T12:15:03.950375875Z","updated_at":"2026-11-05T13:30:00.949926Z"},{"id":"MGASA-2019-0068","title":"Updated opencontainers-runc packages fix security vulnerability","description":"Not using pivot_root(2) leaves the host /proc around in the mount namespace\nso that it is possible to mount another /proc without any other submount,\neven if /proc in the container is not fully visible. This flaw allows an\nattacker to read and modify some parts of the Linux kernel memory\n(rhbz#1663068).\n\nrunc through 1.0-rc6 allows attackers to overwrite the host runc binary\n(and consequently obtain host root access) by leveraging the ability to\nexecute a command as root within one of these types of containers: a new\ncontainer with an attacker-controlled image, or an existing container, to\nwhich the attacker previously had write access, that can be attached with\ndocker exec. This occurs because of file-descriptor mishandling, related\nto /proc/self/exe (CVE-2019-5736).\n","status":"published","published":"2019-02-13T11:08:25Z","modified":"2026-04-16T04:41:28.784369179Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"MGASA-2019-0087","title":"Updated lxc packages fix security vulnerability","description":"LXC allows attackers to overwrite the host LXC binary (and consequently\nobtain host root access) by leveraging the ability to execute a command as\nroot within one of these types of containers: a new container with an\nattacker-controlled image, or an existing container, to which the attacker\npreviously had write access. This occurs because of file-descriptor\nmishandling, related to /proc/self/exe. This attack is only possible with\nprivileged containers since it requires root privilege on the host to\noverwrite the binary.\n","status":"published","published":"2019-02-17T00:31:02Z","modified":"2026-04-16T04:44:37.931500694Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"openSUSE-SU-2019:0170-1","title":"Security update for runc","description":"This update for runc fixes the following issues:\n\nSecurity vulnerabilities addressed:\n\n- CVE-2019-5736: Effectively copying /proc/self/exe during re-exec to avoid\n  write attacks to the host runc binary, which could lead to a container\n  breakout (bsc#1121967)\n- CVE-2018-16873: Fix a remote command execution during 'go get -u'\n  (boo#1118897)\n- CVE-2018-16874: Fix a directory traversal in 'go get' via curly braces in\n  import paths (boo#1118898)\n- CVE-2018-16875: Fix a CPU denial of service issue (boo#1118899)\n\nOther changes and bug fixes:\n\n- Update go requirements to \u003e= go1.10\n- Create a symlink in /usr/bin/runc to enable rootless Podman and Buildah.\n- Make use of %license macro\n- Remove 'go test' from %check section, as it has only ever caused us problems\n  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke\n  testing has been far more useful. (boo#1095817)\n- Upgrade to runc v1.0.0~rc6. Upstream changelog is available from\n  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc6\n","status":"published","published":"2019-02-13T16:51:49Z","modified":"2026-02-04T02:56:36.278074Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2019:0208-1","title":"Security update for runc","description":"This update for runc fixes the following issues:\n\nSecurity vulnerablities addressed:\n\n- CVE-2019-5736: Effectively copying /proc/self/exe during re-exec to avoid\n  write attacks to the host runc binary, which could lead to a container\n  breakout (bsc#1121967)\n- CVE-2018-16873: Fix a remote command execution during 'go get -u'\n  (boo#1118897)\n- CVE-2018-16874: Fix a directory traversal in 'go get' via curly braces in\n  import paths (boo#1118898)\n- CVE-2018-16875: Fix a CPU denial of service issue (boo#1118899)\n\nOther changes and bug fixes:\n\n- Update go requirements to \u003e= go1.10\n- Create a symlink in /usr/bin/runc to enable rootless Podman and Buildah.\n- Make use of %license macro\n- Remove 'go test' from %check section, as it has only ever caused us problems\n  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke\n  testing has been far more useful. (boo#1095817)\n- Upgrade to runc v1.0.0~rc6. Upstream changelog is available from\n  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc6\n","status":"published","published":"2019-03-23T11:03:28Z","modified":"2026-02-04T03:35:28.069313Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2019:0252-1","title":"Security update for docker-runc","description":"This update for docker-runc fixes the following issues:\n\t  \nSecurity issue fixed:\n\n- CVE-2019-5736: Effectively copying /proc/self/exe during re-exec to avoid\n  write attacks to the host runc binary, which could lead to a container\n  breakout (bsc#1121967)\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-03-23T11:05:12Z","modified":"2026-02-04T04:17:14.529757Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2019:0295-1","title":"Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork, runc","description":"This update for containerd, docker, docker-runc, golang-github-docker-libnetwork, runc fixes the following issues:\n\nSecurity issues fixed: \n\n- CVE-2018-16875: Fixed a CPU Denial of Service (bsc#1118899).\n- CVE-2018-16874: Fixed a vulnerabity in go get command which could allow directory traversal in GOPATH mode (bsc#1118898).\n- CVE-2018-16873: Fixed a vulnerability in go get command which could allow remote code execution when executed with -u in GOPATH mode (bsc#1118897).\n- CVE-2019-5736: Effectively copying /proc/self/exe during re-exec to avoid write attacks to the host runc binary, which could lead to a container\n  breakout (bsc#1121967).\n\nOther changes and fixes: \n\n- Update shell completion to use Group: System/Shells.\n- Add daemon.json file with rotation logs configuration (bsc#1114832)\n- Update to Docker 18.09.1-ce (bsc#1124308) and to to runc 96ec2177ae84.\n  See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md.\n- Update go requirements to \u003e= go1.10 \n- Use -buildmode=pie for tests and binary build (bsc#1048046 and bsc#1051429).\n- Remove the usage of 'cp -r' to reduce noise in the build logs.\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-03-23T11:11:59Z","modified":"2026-02-04T03:31:46.538385Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2019:1227-1","title":"Security update for lxc, lxcfs","description":"This update for lxc, lxcfs to version 3.1.0 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-5736: Fixed a container breakout vulnerability (boo#1122185).\n- CVE-2018-6556: Enable setuid bit on lxc-user-nic (boo#988348).\n\nNon-security issues fixed:\n\n- Update to LXC 3.1.0. The changelog is far too long to include here, please\n  look at https://linuxcontainers.org/. (boo#1131762)\n","status":"published","published":"2019-04-17T14:27:35Z","modified":"2026-02-04T03:16:09.025805Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2019:1275-1","title":"Security update for lxc, lxcfs","description":"This update for lxc, lxcfs to version 3.1.0 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-5736: Fixed a container breakout vulnerability (boo#1122185).\n- CVE-2018-6556: Enable setuid bit on lxc-user-nic (boo#988348).\n\nNon-security issues fixed:\n\n- Update to LXC 3.1.0. The changelog is far too long to include here, please\n  look at https://linuxcontainers.org/. (boo#1131762)\n","status":"published","published":"2019-04-25T13:56:14Z","modified":"2026-02-04T03:04:03.649865Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2019:1444-1","title":"Security update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork","description":"This update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-5736: containerd: Fixing container breakout vulnerability (bsc#1121967).\n- CVE-2019-6486: go security release, fixing crypto/elliptic CPU DoS vulnerability affecting P-521 and P-384 (bsc#1123013).\n- CVE-2018-16873: go secuirty release, fixing cmd/go remote command execution (bsc#1118897).\n- CVE-2018-16874: go security release, fixing cmd/go directory traversal (bsc#1118898).\n- CVE-2018-16875: go security release, fixing crypto/x509 CPU denial of service (bsc#1118899).\n\nOther changes and bug fixes:\n\n- Update to containerd v1.2.5, which is required for v18.09.5-ce (bsc#1128376, bsc#1134068).\n- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce (bsc#1128376, bsc#1134068).\n- Update to Docker 18.09.5-ce see upstream changelog in the packaged (bsc#1128376, bsc#1134068).\n- docker-test: Improvements to test packaging (bsc#1128746).\n- Move daemon.json file to /etc/docker directory (bsc#1114832).\n- Revert golang(API) removal since it turns out this breaks \u003e= requires in certain cases (bsc#1114209).\n- Fix go build failures (bsc#1121397).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-05-27T05:09:20Z","modified":"2026-02-04T04:13:40.567028Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2019:1499-1","title":"Security update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork","description":"This update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-5736: containerd: Fixing container breakout vulnerability (bsc#1121967).\n- CVE-2019-6486: go security release, fixing crypto/elliptic CPU DoS vulnerability affecting P-521 and P-384 (bsc#1123013).\n- CVE-2018-16873: go secuirty release, fixing cmd/go remote command execution (bsc#1118897).\n- CVE-2018-16874: go security release, fixing cmd/go directory traversal (bsc#1118898).\n- CVE-2018-16875: go security release, fixing crypto/x509 CPU denial of service (bsc#1118899).\n\nOther changes and bug fixes:\n\n- Update to containerd v1.2.5, which is required for v18.09.5-ce (bsc#1128376, bsc#1134068).\n- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce (bsc#1128376, bsc#1134068).\n- Update to Docker 18.09.5-ce see upstream changelog in the packaged (bsc#1128376, bsc#1134068).\n- docker-test: Improvements to test packaging (bsc#1128746).\n- Move daemon.json file to /etc/docker directory (bsc#1114832).\n- Revert golang(API) removal since it turns out this breaks \u003e= requires in certain cases (bsc#1114209).\n- Fix go build failures (bsc#1121397).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-06-03T08:21:16Z","modified":"2026-02-04T04:10:51.06425Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2019:1506-1","title":"Security update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork","description":"This update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-5736: containerd: Fixing container breakout vulnerability (bsc#1121967).\n- CVE-2019-6486: go security release, fixing crypto/elliptic CPU DoS vulnerability affecting P-521 and P-384 (bsc#1123013).\n- CVE-2018-16873: go secuirty release, fixing cmd/go remote command execution (bsc#1118897).\n- CVE-2018-16874: go security release, fixing cmd/go directory traversal (bsc#1118898).\n- CVE-2018-16875: go security release, fixing crypto/x509 CPU denial of service (bsc#1118899).\n\nOther changes and bug fixes:\n\n- Update to containerd v1.2.5, which is required for v18.09.5-ce (bsc#1128376, bsc#1134068).\n- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce (bsc#1128376, bsc#1134068).\n- Update to Docker 18.09.5-ce see upstream changelog in the packaged (bsc#1128376, bsc#1134068).\n- docker-test: Improvements to test packaging (bsc#1128746).\n- Move daemon.json file to /etc/docker directory (bsc#1114832).\n- Revert golang(API) removal since it turns out this breaks \u003e= requires in certain cases (bsc#1114209).\n- Fix go build failures (bsc#1121397).\n\nThis update was imported from the SUSE:SLE-15:Update update project.\nThis update was imported from the openSUSE:Leap:15.0:Update update project.","status":"published","published":"2019-06-03T11:22:06Z","modified":"2026-02-04T02:41:42.913839Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2019:2021-1","title":"Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork","description":"This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues:\n\nDocker:\n\n- CVE-2019-14271: Fixed a code injection if the nsswitch facility dynamically loaded a library inside a chroot (bsc#1143409).\n- CVE-2019-13509: Fixed an information leak in the debug log (bsc#1142160).\n- Update to version 19.03.1-ce, see changelog at /usr/share/doc/packages/docker/CHANGELOG.md (bsc#1142413, bsc#1139649).\n\nrunc:\n\n- Use %config(noreplace) for /etc/docker/daemon.json (bsc#1138920).\n- Update to runc 425e105d5a03, which is required by Docker (bsc#1139649).\n\ncontainerd:\n\n- CVE-2019-5736: Fixed a container breakout vulnerability (bsc#1121967).\n- Update to containerd v1.2.6, which is required by docker (bsc#1139649).\n\ngolang-github-docker-libnetwork:\n\n- Update to version git.fc5a7d91d54cc98f64fc28f9e288b46a0bee756c, which is required by docker (bsc#1142413, bsc#1139649).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-08-29T16:21:56Z","modified":"2026-02-04T02:35:10.511862Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2019:2245-1","title":"Security update for lxc","description":"This update for lxc fixes the following issues:\n\nUpdate to lxc 3.2.1.\nThe changelog can be found at\n\n  https://discuss.linuxcontainers.org/t/lxc-3-2-1-has-been-released/5322\n\n+ seccomp: support syscall forwarding to userspace\n+ add lxc.seccomp.allow_nesting\n+ pidfd: Add initial support for the new pidfd api\n* Many hardening improvements.\n* Use /sys/kernel/cgroup/delegate file for cgroup v2.\n* Fix CVE-2019-5736 equivalent bug.\n\n- fix apparmor dropin to be compatible with LXC 3.1.0 (boo#1131762)","status":"published","published":"2019-10-03T10:23:09Z","modified":"2025-05-07T18:11:07.586333Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2019:2286-1","title":"Security update for lxc","description":"This update for lxc fixes the following issues:\n\nUpdate to lxc 3.2.1.\nThe changelog can be found at\n\n  https://discuss.linuxcontainers.org/t/lxc-3-2-1-has-been-released/5322\n\n+ seccomp: support syscall forwarding to userspace\n+ add lxc.seccomp.allow_nesting\n+ pidfd: Add initial support for the new pidfd api\n* Many hardening improvements.\n* Use /sys/kernel/cgroup/delegate file for cgroup v2.\n* Fix CVE-2019-5736 equivalent bug.\n\n- fix apparmor dropin to be compatible with LXC 3.1.0 (boo#1131762)\nThis update was imported from the openSUSE:Leap:15.1:Update update project.","status":"published","published":"2019-10-07T15:30:53Z","modified":"2026-02-04T04:11:28.55382Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2024:10693-1","title":"containerd-1.4.8-2.2 on GA media","description":"These are all security issues fixed in the containerd-1.4.8-2.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:33:56.633182Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"openSUSE-SU-2024:10762-1","title":"flatpak-1.11.3-1.2 on GA media","description":"These are all security issues fixed in the flatpak-1.11.3-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:04:12.056832Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"openSUSE-SU-2024:11030-1","title":"liblxc-devel-4.0.9-1.1 on GA media","description":"These are all security issues fixed in the liblxc-devel-4.0.9-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:35:59.205857Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:11358-1","title":"runc-1.0.2-1.2 on GA media","description":"These are all security issues fixed in the runc-1.0.2-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:01:48.763706Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2019:0362-1","title":"Security update for docker-runc","description":"This update for docker-runc fixes the following issues:\n\t  \nSecurity issue fixed:\n\n- CVE-2019-5736: Effectively copying /proc/self/exe during re-exec to avoid\n  write attacks to the host runc binary, which could lead to a container\n  breakout (bsc#1121967)\n","status":"published","published":"2019-02-13T12:31:58Z","modified":"2026-02-04T03:08:22.127283Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0385-1","title":"Security update for docker-runc","description":"This update for docker-runc fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2019-5736: Effectively copying /proc/self/exe during re-exec to avoid\n  write attacks to the host runc binary, which could lead to a container\n  breakout (bsc#1121967)\n","status":"published","published":"2019-02-13T16:56:08Z","modified":"2026-02-04T02:34:52.689112Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0495-1","title":"Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork, runc","description":"This update for containerd, docker, docker-runc, golang-github-docker-libnetwork, runc fixes the following issues:\n\nSecurity issues fixed: \n\n- CVE-2018-16875: Fixed a CPU Denial of Service (bsc#1118899).\n- CVE-2018-16874: Fixed a vulnerabity in go get command which could allow directory traversal in GOPATH mode (bsc#1118898).\n- CVE-2018-16873: Fixed a vulnerability in go get command which could allow remote code execution when executed with -u in GOPATH mode (bsc#1118897).\n- CVE-2019-5736: Effectively copying /proc/self/exe during re-exec to avoid write attacks to the host runc binary, which could lead to a container\n  breakout (bsc#1121967).\n\nOther changes and fixes: \n\n- Update shell completion to use Group: System/Shells.\n- Add daemon.json file with rotation logs configuration (bsc#1114832)\n- Update to Docker 18.09.1-ce (bsc#1124308) and to to runc 96ec2177ae84.\n  See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md.\n- Update go requirements to \u003e= go1.10 \n- Use -buildmode=pie for tests and binary build (bsc#1048046 and bsc#1051429).\n- Remove the usage of 'cp -r' to reduce noise in the build logs.\n","status":"published","published":"2019-02-26T15:42:38Z","modified":"2026-02-04T03:55:49.96411Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0573-1","title":"Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork, runc","description":"This update for containerd, docker, docker-runc, golang-github-docker-libnetwork, runc fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-16875: Fixed a CPU Denial of Service (bsc#1118899).\n- CVE-2018-16874: Fixed a vulnerabity in go get command which could allow directory traversal in GOPATH mode (bsc#1118898).\n- CVE-2018-16873: Fixed a vulnerability in go get command which could allow remote code execution when executed with -u in GOPATH mode (bsc#1118897).\n- CVE-2019-5736: Effectively copying /proc/self/exe during re-exec to avoid write attacks to the host runc binary, which could lead to a container\n  breakout (bsc#1121967).\n\nOther changes and bug fixes:\n\n- Update shell completion to use Group: System/Shells.\n- Add daemon.json file with rotation logs configuration (bsc#1114832)\n- Update to Docker 18.09.1-ce (bsc#1124308) and to to runc 96ec2177ae84.\n  See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md.\n- Disable leap based builds for kubic flavor (bsc#1121412).\n- Allow users to explicitly specify the NIS domain name of a container (bsc#1001161).\n- Update docker.service to match upstream and avoid rlimit problems (bsc#1112980).\n- Update go requirements to \u003e= go1.10 \n- Use -buildmode=pie for tests and binary build (bsc#1048046 and bsc#1051429).\n- Remove the usage of 'cp -r' to reduce noise in the build logs.\n","status":"published","published":"2019-03-08T12:49:44Z","modified":"2026-02-04T04:12:12.336004Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:1234-1","title":"Security update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork","description":"This update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-5736: containerd: Fixing container breakout vulnerability (bsc#1121967).\n- CVE-2019-6486: go security release, fixing crypto/elliptic CPU DoS vulnerability affecting P-521 and P-384 (bsc#1123013).\n- CVE-2018-16873: go secuirty release, fixing cmd/go remote command execution (bsc#1118897).\n- CVE-2018-16874: go security release, fixing cmd/go directory traversal (bsc#1118898).\n- CVE-2018-16875: go security release, fixing crypto/x509 CPU denial of service (bsc#1118899).\n\nOther changes and bug fixes:\n\n- Update to containerd v1.2.5, which is required for v18.09.5-ce (bsc#1128376, bsc#1134068).\n- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce (bsc#1128376, bsc#1134068).\n- Update to Docker 18.09.5-ce see upstream changelog in the packaged (bsc#1128376, bsc#1134068).\n- docker-test: Improvements to test packaging (bsc#1128746).\n- Move daemon.json file to /etc/docker directory (bsc#1114832).\n- Revert golang(API) removal since it turns out this breaks \u003e= requires in certain cases (bsc#1114209).\n- Fix go build failures (bsc#1121397).\n","status":"published","published":"2019-05-14T16:31:56Z","modified":"2026-02-04T04:31:28.603199Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:1234-2","title":"Security update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork","description":"This update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-5736: containerd: Fixing container breakout vulnerability (bsc#1121967).\n- CVE-2019-6486: go security release, fixing crypto/elliptic CPU DoS vulnerability affecting P-521 and P-384 (bsc#1123013).\n- CVE-2018-16873: go secuirty release, fixing cmd/go remote command execution (bsc#1118897).\n- CVE-2018-16874: go security release, fixing cmd/go directory traversal (bsc#1118898).\n- CVE-2018-16875: go security release, fixing crypto/x509 CPU denial of service (bsc#1118899).\n\nOther changes and bug fixes:\n\n- Update to containerd v1.2.5, which is required for v18.09.5-ce (bsc#1128376, bsc#1134068).\n- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce (bsc#1128376, bsc#1134068).\n- Update to Docker 18.09.5-ce see upstream changelog in the packaged (bsc#1128376, bsc#1134068).\n- docker-test: Improvements to test packaging (bsc#1128746).\n- Move daemon.json file to /etc/docker directory (bsc#1114832).\n- Revert golang(API) removal since it turns out this breaks \u003e= requires in certain cases (bsc#1114209).\n- Fix go build failures (bsc#1121397).\n","status":"published","published":"2019-06-13T13:28:57Z","modified":"2026-02-04T03:05:38.061456Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:2117-1","title":"Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork","description":"This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues:\n\nDocker:\n\n- CVE-2019-14271: Fixed a code injection if the nsswitch facility dynamically loaded a library inside a chroot (bsc#1143409).\n- CVE-2019-13509: Fixed an information leak in the debug log (bsc#1142160).\n- Update to version 19.03.1-ce, see changelog at /usr/share/doc/packages/docker/CHANGELOG.md (bsc#1142413, bsc#1139649).\n\nrunc:\n\n- Use %config(noreplace) for /etc/docker/daemon.json (bsc#1138920).\n- Update to runc 425e105d5a03, which is required by Docker (bsc#1139649).\n\ncontainerd:\n\n- CVE-2019-5736: Fixed a container breakout vulnerability (bsc#1121967).\n- Update to containerd v1.2.6, which is required by docker (bsc#1139649).\n\ngolang-github-docker-libnetwork:\n\n- Update to version git.fc5a7d91d54cc98f64fc28f9e288b46a0bee756c, which is required by docker (bsc#1142413, bsc#1139649).\n","status":"published","published":"2019-08-13T12:56:58Z","modified":"2026-02-04T02:34:23.262641Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:2119-1","title":"Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork","description":"This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues:\n\nDocker:\n\n- CVE-2019-14271: Fixed a code injection if the nsswitch facility dynamically loaded a library inside a chroot (bsc#1143409).\n- CVE-2019-13509: Fixed an information leak in the debug log (bsc#1142160).\n- Update to version 19.03.1-ce, see changelog at /usr/share/doc/packages/docker/CHANGELOG.md (bsc#1142413).\n\ngolang-github-docker-libnetwork:\n\n- Update to version git.fc5a7d91d54cc98f64fc28f9e288b46a0bee756c, which is required by docker (bsc#1142413).\n","status":"published","published":"2019-08-13T12:58:40Z","modified":"2026-02-04T04:02:44.642338Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2021:1458-1","title":"Security update for containerd, docker, runc","description":"This update for containerd, docker, runc fixes the following issues:\n\n- Docker was updated to 20.10.6-ce\n  *  Switch version to use -ce suffix rather than _ce to avoid confusing other\n     tools (bsc#1182476).\n  * CVE-2021-21284: Fixed a potential privilege escalation when the root user in \n    the remapped namespace has access to the host filesystem (bsc#1181732)\n  * CVE-2021-21285: Fixed an issue where pulling a malformed Docker image manifest \n    crashes the dockerd daemon (bsc#1181730). \n\n- runc was updated to  v1.0.0~rc93 (bsc#1182451 and bsc#1184962).\n  * Use the upstream runc package (bsc#1181641, bsc#1181677, bsc#1175821).\n  * Fixed /dev/null is not available (bsc#1168481).\n  * Fixed an issue where podman hangs when spawned by salt-minion process (bsc#1149954).\n  * CVE-2019-19921: Fixed a race condition with shared mounts (bsc#1160452).\n  * CVE-2019-16884: Fixed an LSM bypass via malicious Docker image that mount \n    over a /proc directory (bsc#1152308).\n  * CVE-2019-5736: Fixed potential write attacks to the host runc binary (bsc#1121967).\n  * Fixed an issue where after a kernel-update docker doesn't run (bsc#1131314 bsc#1131553)\n  * Ensure that we always include the version information in runc (bsc#1053532).\n  \n- Switch to Go 1.13 for build.\n  * CVE-2018-16873: Fixed a potential remote code execution (bsc#1118897).\n  * CVE-2018-16874: Fixed a directory traversal in 'go get' via curly braces \n    in import paths (bsc#1118898).\n  * CVE-2018-16875: Fixed a CPU denial of service (bsc#1118899).\n  * Fixed an issue with building containers (bsc#1095817).\n\n- containerd was updated to v1.4.4\n  * CVE-2021-21334: Fixed a potential information leak through environment variables (bsc#1183397).\n  * Handle a requirement from docker (bsc#1181594).\n  * Install the containerd-shim* binaries and stop creating (bsc#1183024).\n  * update version to the one required by docker (bsc#1034053)\n\n- Use -buildmode=pie for tests and binary build (bsc#1048046, bsc#1051429)\n- Cleanup seccomp builds similar (bsc#1028638).\n- Update to handle the docker-runc removal, and drop the -kubic flavour (bsc#1181677, bsc#1181749)\n","status":"published","published":"2021-04-30T10:58:51Z","modified":"2026-02-04T02:16:12.876879Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"USN-4048-1","title":"Docker vulnerabilities","description":"Aleksa Sarai discovered that Docker was vulnerable to a directory traversal\nattack. An attacker could use this vulnerability to read and write arbitrary\nfiles on the host filesystem as root.\n","status":"published","published":"2019-07-08T14:41:56Z","modified":"2026-02-10T04:41:34Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}