CVE-2023-27561

HIGH7.0EPSS 0.15%

Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc

發布日:2023/3/3修改日:2026/4/28

描述

runc through 1.1.4 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit this, an attacker must be able to spawn two containers with custom volume-mount configurations, and be able to run custom images. NOTE: this issue exists because of a CVE-2019-19921 regression.

受影響套件(3)

CVSS 分數

來源版本嚴重程度向量
osvCVSS 3.1HIGH7.0CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

參考連結(21)