CVE-2019-19921

Published: 12 February 2020

runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit this, an attacker must be able to spawn two containers with custom volume-mount configurations, and be able to run custom images. (This vulnerability does not affect Docker due to an implementation detail that happens to block the attack.)

Priority

Cvss 3 Severity Score

7.0

Score breakdown

Status

Package	Release	Status
runc Launchpad, Ubuntu, Debian	bionic	Released (1.0.0~rc10-0ubuntu1~18.04.2)
	disco	Ignored (end of life)
	eoan	Released (1.0.0~rc10-0ubuntu1~19.10.2)
	focal	Released (1.0.0~rc10-0ubuntu1)
	groovy	Released (1.0.0~rc10-0ubuntu1)
	hirsute	Released (1.0.0~rc10-0ubuntu1)
	impish	Released (1.0.0~rc10-0ubuntu1)
	jammy	Released (1.0.0~rc10-0ubuntu1)
	kinetic	Released (1.0.0~rc10-0ubuntu1)
	lunar	Released (1.0.0~rc10-0ubuntu1)
	trusty	Does not exist
	upstream	Released (1.0.0~rc10)
	xenial	Released (1.0.0~rc7+git20190403.029124da-0ubuntu1~16.04.4+esm4) Available with Ubuntu Pro
	Patches: upstream: https://github.com/opencontainers/runc/pull/2207/commits/3291d66b98445bd7f7d02eac7f2bca2ac2c56942

Severity score breakdown

Parameter	Value
Base score	7.0
Attack vector	Local
Attack complexity	High
Privileges required	Low
User interaction	None
Scope	Unchanged
Confidentiality	High
Integrity impact	High
Availability impact	High
Vector	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

References

Bugs

Join the discussion

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›