module = "github.com/opencontainers/runc"
package = "github.com/opencontainers/runc/libcontainer"

description = """
A race while mounting volumes allows a possible symlink-exchange
attack, allowing a user whom can start multiple containers with
custom volume mount configurations to escape the container.

"""

cve = "CVE-2019-19921"

credit = "Leopold Schabel"

symbols = ["mountToRootfs"]

published = "2021-04-14T12:00:00Z"

[[versions]]
fixed = "v1.0.0-rc9.0.20200122160610-2fc03cc11c77"

[links]
commit = "https://github.com/opencontainers/runc/commit/2fc03cc11c775b7a8b2e48d7ee447cb9bef32ad0"
pr = "https://github.com/opencontainers/runc/pull/2207"
context = ["https://github.com/opencontainers/runc/issues/2197"]