PT-2018-9751 · Runv+2 · Runv+2

Attritionorg · Publicado 2018-04-19 · Atualizado 2019-10-03 · CVE-2018-10205

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions: HyperHQ Hyper version 1.0.0 runV version 1.0.0

Description: The issue is related to memory leaks in the container setup modules and hyper rescan scsi functions in container.c. This problem is associated with the use of runV 1.0.0 for Docker.

Recommendations: For HyperHQ Hyper version 1.0.0, consider disabling the container setup modules and hyper rescan scsi functions in container.c as a temporary workaround until a patch is available. For runV version 1.0.0, restrict the use of the affected functions to minimize the risk of exploitation.

Correção

Missing Release of Resource after Effective Lifetime

Enumeração de Fraquezas

CWE-772

Identificadores relacionados

CVE-2018-10205

Produtos afetados

Docker

Hyperhq Hyper

Runv

Referências · 3

• https://github.com/hyperhq/hyperstart/pull/350 · Nota
• https://osv.dev/vulnerability/CVE-2018-10205 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-10205 · Nota de Segurança