PT-2018-13515 · Google · Gvisor

Published 2018-09-02 · Updated 2019-10-03 · CVE-2018-16359

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Google gVisor versions prior to 2018-08-23

Description The issue allows attackers to rename files on the host OS by permitting access to the renameat system call within the seccomp sandbox.

Recommendations For Google gVisor versions prior to 2018-08-23, update to a version released after 2018-08-23 to resolve the issue.

Fix

Related Identifiers

CVE-2018-16359

Affected Products

Gvisor

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-16359 · Security Note
• https://bugs.chromium.org/p/project-zero/issues/detail?id=1632 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-16359 · Vendor Advisory
• https://github.com/google/gvisor/commit/001a4c2493b13a43d62c7511fb509a959ae4abc2 · Note