blob: 64625d9bf5f7328291263d62fe18d4c549d299b5 [file] [log] [blame]
module: github.com/opencontainers/runc
package: github.com/opencontainers/runc/libcontainer
additional_packages:
- module: github.com/opencontainers/selinux
package: github.com/opencontainers/selinux/go-selinux
versions:
- fixed: v1.3.1-0.20190929122143-5215b1806f52
versions:
- fixed: v1.0.0-rc8.0.20190930145003-cad42f6e0932
description: |
AppArmor restrictions may be bypassed due to improper validation of mount
targets, allowing a malicious image to mount volumes over e.g. /proc.
published: 2021-04-14T12:00:00Z
cve: CVE-2019-16884
credit: Leopold Schabel
links:
pr: https://github.com/opencontainers/runc/pull/2130
commit: https://github.com/opencontainers/runc/commit/cad42f6e0932db0ce08c3a3d9e89e6063ec283e4
context:
- https://github.com/opencontainers/runc/issues/2128