Red Hat Security AdvisoryRHSA-2019:0975
container-tools:rhel8 security and bug fix update
Released 2019-05-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) buildah-1.5-3.gite94b4f9.module+el8.0.0+2958+4e823551.aarch64::container-tools:rhel8, buildah-1.5-3.gite94b4f9.module+el8.0.0+2958+4e823551.ppc64le::container-tools:rhel8, buildah-1.5-3.gite94b4f9.module+el8.0.0+2958+4e823551.s390x::container-tools:rhel8 +47
Fixes 1 record
Priority HIGH 82
runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as r…
CVSS 3.1HIGH 8.6· Local · No auth · User interaction · EPSS 0.98452 · Published 2019-02-11 · Partial fix CWE-78
