PT-2021-7760 · Runc+6 · Runc+6
Felix Wilhelm
·
Published
2021-11-09
·
Updated
2024-06-15
·
CVE-2021-43784
CVSS v2.0
6.0
Medium
| Vector | AV:N/AC:M/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
runc versions prior to 1.0.3
Description
The issue is related to an integer overflow in the 16-bit length field for the byte array attribute type in the netlink serialization system used by runc. This allows an attacker with control over the container configuration to bypass namespace restrictions by adding a malicious netlink payload. The main users impacted are those who allow untrusted images with untrusted configurations to run on their machines, such as with shared cloud infrastructure.
Recommendations
For versions prior to 1.0.3, update to version 1.0.3 to fix the bug.
As a temporary workaround, consider disallowing untrusted namespace paths from your container configuration to minimize the risk of exploitation.
Exploit
Fix
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Red Hat
Suse
Ubuntu
Runc