PT-2020-5850 · Docker+3 · Docker+3
Alex Chapman
·
Published
2020-12-22
·
Updated
2025-10-11
·
CVE-2021-21284
CVSS v3.1
6.8
Medium
| Vector | AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions:
Docker versions prior to 19.03.15
Docker versions prior to 20.10.3
Description:
The issue involves the --userns-remap option, which allows privilege escalation to real root when the root user in the remapped namespace has access to the host filesystem. This can lead to writing files with extended privileges under "/var/lib/docker/".
Recommendations:
For Docker versions prior to 19.03.15, update to version 19.03.15 or later to prevent privilege escalation from remapped user.
For Docker versions prior to 20.10.3, update to version 20.10.3 or later to prevent privilege escalation from remapped user.
As a temporary workaround, consider restricting access to the host filesystem for the root user in the remapped namespace to minimize the risk of exploitation.
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Docker
Suse