PT-2018-9751 · Runv+2 · Runv+2

Attritionorg · Published 2018-04-19 · Updated 2019-10-03 · CVE-2018-10205

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions: HyperHQ Hyper version 1.0.0 runV version 1.0.0

Description: The issue is related to memory leaks in the container setup modules and hyper rescan scsi functions in container.c. This problem is associated with the use of runV 1.0.0 for Docker.

Recommendations: For HyperHQ Hyper version 1.0.0, consider disabling the container setup modules and hyper rescan scsi functions in container.c as a temporary workaround until a patch is available. For runV version 1.0.0, restrict the use of the affected functions to minimize the risk of exploitation.

Fix

Missing Release of Resource after Effective Lifetime

Weakness Enumeration

CWE-772

Related Identifiers

CVE-2018-10205

Affected Products

Docker

Hyperhq Hyper

Runv

References · 3

• https://osv.dev/vulnerability/CVE-2018-10205 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-10205 · Security Note
• https://github.com/hyperhq/hyperstart/pull/350 · Note