| packages: |
| - module: github.com/opencontainers/runc |
| package: github.com/opencontainers/runc/libcontainer |
| versions: |
| - fixed: 1.0.0-rc8.0.20190930145003-cad42f6e0932 |
| - module: github.com/opencontainers/selinux |
| package: github.com/opencontainers/selinux/go-selinux |
| versions: |
| - fixed: 1.3.1-0.20190929122143-5215b1806f52 |
| description: | |
| AppArmor restrictions may be bypassed due to improper validation of mount |
| targets, allowing a malicious image to mount volumes over e.g. /proc. |
| published: 2021-04-14T20:04:52Z |
| cves: |
| - CVE-2019-16884 |
| ghsas: |
| - GHSA-fgv8-vj5c-2ppq |
| credit: Leopold Schabel |
| links: |
| pr: https://github.com/opencontainers/runc/pull/2130 |
| commit: https://github.com/opencontainers/runc/commit/cad42f6e0932db0ce08c3a3d9e89e6063ec283e4 |
| context: |
| - https://github.com/opencontainers/runc/issues/2128 |
