VDB
BDU%3A2020-04920
BDU%3A2020-04920
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость компонента AppArmor инструмента для запуска изолированных контейнеров runc, связанная с недостатками механизма авторизации, позволяющая нарушителю монтировать вредоносный образ Docker в каталог /proc
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Canonical Ltd., Fedora Project, Red Hat Inc., Novell Inc., Сообщество свободного программного обеспечения, Docker Inc., АО "НППКТ" | Ubuntu, Fedora, Red Hat Enterprise Linux, SUSE Linux Enterprise Module for Open Buildservice Development Tools, OpenSUSE Leap, SUSE CaaS Platform, OpenShift Container Platform, SUSE Linux Enterprise Module for Containers, runc, Docker, ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913) |
Timeline
- Nov 2, 2020 CVE Published
- Sep 13, 2023 CVE Updated
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Security Advisory
References
- https://www.suse.com/security/cve/CVE-2019-16884/ url
- https://nvd.nist.gov/vuln/detail/CVE-2019-16884 url
- https://vuldb.com/?id.142306 url
- https://github.com/opencontainers/runc/issues/2128 url
- https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00010.html url
- https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00009.html url
- https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00073.html url
- https://access.redhat.com/errata/RHSA-2019:3940 url
- https://access.redhat.com/errata/RHSA-2019:4074 url
- https://access.redhat.com/errata/RHSA-2019:4269 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/62OQ2P7K5YDZ5BRCH2Q6DHUJIHQD3QCD/ url
- https://поддержка.нппкт.рф/bin/view/ОСнова/Обновления/2.8/ url
- https://ubuntu.com/security/notices/USN-4297-1 advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DGK6IV5JGVDXHOXEKJOJWKOVNZLT6MYR/ advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SPK4JWP32BUIVDJ3YODZSOEVEW6BHQCF/ advisory