VDB
BDU%3A2020-04920
BDU%3A2020-04920
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость компонента AppArmor инструмента для запуска изолированных контейнеров runc, связанная с недостатками механизма авторизации, позволяющая нарушителю монтировать вредоносный образ Docker в каталог /proc
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Canonical Ltd., Fedora Project, Red Hat, Inc., Novell Inc., Сообщество свободного программного обеспечения, Docker Inc., АО «НППКТ» | Ubuntu, Fedora, Red Hat Enterprise Linux, SUSE Linux Enterprise Module for Open Buildservice Development Tools, OpenSUSE Leap, SUSE CaaS Platform, OpenShift Container Platform, SUSE Linux Enterprise Module for Containers, runc, Docker, ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913) | |
| Canonical Ltd., Fedora Project, Red Hat Inc., Novell Inc., Сообщество свободного программного обеспечения, Docker Inc., АО "НППКТ" | Ubuntu, Fedora, Red Hat Enterprise Linux, SUSE Linux Enterprise Module for Open Buildservice Development Tools, OpenSUSE Leap, SUSE CaaS Platform, OpenShift Container Platform, SUSE Linux Enterprise Module for Containers, runc, Docker, ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913) |
Timeline
- Nov 2, 2020 CVE Published
- Sep 13, 2023 CVE Updated
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
References
- https://www.suse.com/security/cve/CVE-2019-16884/ advisory
- https://nvd.nist.gov/vuln/detail/CVE-2019-16884 url
- https://vuldb.com/?id.142306 url
- https://github.com/opencontainers/runc/issues/2128 url
- https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00010.html advisory
- https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00009.html advisory
- https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00073.html advisory
- https://access.redhat.com/errata/RHSA-2019:3940 advisory
- https://access.redhat.com/errata/RHSA-2019:4074 advisory
- https://access.redhat.com/errata/RHSA-2019:4269 advisory
- https://ubuntu.com/security/notices/USN-4297-1 advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DGK6IV5JGVDXHOXEKJOJWKOVNZLT6MYR/ advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SPK4JWP32BUIVDJ3YODZSOEVEW6BHQCF/ advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/62OQ2P7K5YDZ5BRCH2Q6DHUJIHQD3QCD/ advisory
- https://поддержка.нппкт.рф/bin/view/ОСнова/Обновления/2.8/ url