CVE-2019-16884
HIGH 7.5EPSS 4.4%
runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount targets, and thus a malicious Docker image can mount over a /proc directory.
- CVSS v3.1 NVD
- 7.5 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - CVSS v2.0 NVD
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N - EPSS
- 4.41% chance of exploitation in the next 30 days, 91st percentile
- Published
- 2019-09-25
- Updated
- 2024-08-05
Proof-of-concept exploits (1)
- opencontainers/runc/issues/212813489★ · 2026-10-16
Security advisories
- http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00073.html
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00009.html
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00010.html
- https://access.redhat.com/errata/RHSA-2019:3940
- https://access.redhat.com/errata/RHSA-2019:4074
- https://access.redhat.com/errata/RHSA-2019:4269
- https://security.gentoo.org/glsa/202003-21
- https://security.netapp.com/advisory/ntap-20220221-0004
- https://usn.ubuntu.com/4297-1
- advisories/GHSA-fgv8-vj5c-2ppq