PT-2018-13515 · Google · Gvisor

Publicado 2018-09-02 · Atualizado 2019-10-03 · CVE-2018-16359

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Google gVisor versions prior to 2018-08-23

Description The issue allows attackers to rename files on the host OS by permitting access to the renameat system call within the seccomp sandbox.

Recommendations For Google gVisor versions prior to 2018-08-23, update to a version released after 2018-08-23 to resolve the issue.

Correção

Identificadores relacionados

CVE-2018-16359

Produtos afetados

Gvisor

Referências · 4

• https://github.com/google/gvisor/commit/001a4c2493b13a43d62c7511fb509a959ae4abc2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-16359 · Nota de Segurança
• https://bugs.chromium.org/p/project-zero/issues/detail?id=1632 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-16359 · Aviso do Fabricante