Red Hat Security Advisory

RHSA-2020:0688

OpenShift Container Platform 4.2.22 runc security update

Released 2020-03-10 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.2 runc-1.0.0-63.rc10.rhaos4.2.gitdc9208a.el8

TI-2019-14367 CVE-2019-19921 · GHSA-fh74-hm69-rqjw

LOW 31

runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00433 Published 2020-02-12 Partial fix · 1.0.0-rc9.0.20200122160610-2fc03cc11c77 CWE-706