moby-runc vulnerabilities (Azure Linux)
11 vulnerabilities.
-
moby-runcAzure Linux runc: LSM labels can be bypassed with malicious config using dummy procfs files 7.3 High -
moby-runcAzure Linux container escape due to /dev/console mount and related races 8.4 High -
moby-runcAzure Linux runc container escape via "masked path" abuse due to mount race conditions 7.3 High -
moby-runcAzure Linux runc can be confused to create empty files/directories on the host 3.6 Low -
moby-runcAzure Linux runc container breakout through process.cwd trickery and leaked fds 8.6 High -
moby-runcAzure Linux rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc 5.0 Medium -
moby-runcAzure Linux AppArmor bypass with symlinked /proc in runc 6.1 Medium -
moby-runcAzure Linux Opencontainers runc Incorrect Authorization vulnerability 7.0 High -
moby-runcAzure Linux Incorrect Default Permissions in runc 5.9 Medium -
moby-runcAzure Linux Default inheritable capabilities for linux container should be empty 5.9 Medium -
moby-runcAzure Linux Overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration 6.0 Medium