FLAT-WOR86 – Vulnerability | Fluid Attacks Database

Database

Description

sandbox escape

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
go	github.com/opencontainers/runc	>=0 <1.0.0-rc95	1.0.0-rc95
debian 11	runc	>=0 <1.0.0~rc93+ds1-5	1.0.0~rc93+ds1-5
debian 13	runc	>=0 <1.0.0~rc93+ds1-5	1.0.0~rc93+ds1-5
debian 14	runc	>=0 <1.0.0~rc93+ds1-5	1.0.0~rc93+ds1-5
go	github.com/opencontainers/runc/libcontainer	>=0 <1.0.0-rc95	1.0.0-rc95
debian 12	runc	>=0 <1.0.0~rc93+ds1-5	1.0.0~rc93+ds1-5
rpm rhel8	runc	-	-
alpm rolling_release	runc	>=1.0.0rc94-1 <1.0.0rc95-1	1.0.0rc95-1

Aliases

1. CVE-2021-304652. NVD-2021-304653. OSV-2021-304654. OSV-DEBIAN-2021-304655. GHSA-c3xm-pvg7-gh7r6. GCVE-2021-304657. lists.debian.org8. security.gentoo.org9. SECURITY-TRACKER-CVE-2021-3046510. GHSA-c3xm-pvg7-gh7r

References

1. https://github.com/opencontainers/runc/security/advisories/GHSA-c3xm-pvg7-gh7r2. https://github.com/opencontainers/runc/commit/0ca91f44f1664da834bc61115a849b56d22f595f3. https://bugzilla.opensuse.org/show_bug.cgi?id=11854054. https://github.com/opencontainers/runc/releases5. https://lists.fedoraproject.org/archives/list/[email protected]/message/35ZW6NBZSBH5PWIT7JU4HXOXGFVDCOHH6. https://lists.fedoraproject.org/archives/list/[email protected]/message/4HOARVIT47RULTTFWAU7XBG4WY6TDDHV7. https://security.netapp.com/advisory/ntap-20210708-00038. http://www.openwall.com/lists/oss-security/2021/05/19/2

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.