runc through 1.0.0-rc8 as used in Docker through 19.03.2-ce and other products allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount targets and thus a malicious Docker image can mount over a /proc directory.

🗓️ 16 Jul 2021 07:00:00Reported by MicrosoftType

Runc vulnerability allows AppArmor bypass via incorrect mount target checks enabling mounting over /proc in Docker.

Reporter	Title	Published	Views	Family All 159
ALT Linux	Security fix for the ALT Linux 10 package runc version 1.0.0-alt10.rc9	10 Oct 201900:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM® Db2® On Openshift and IBM® Db2® and Db2 Warehouse® on Cloud Pak for Data	29 Jun 202217:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from containerd, gnupg2, runc and IBM WebSphere Application Server Liberty	20 Oct 202212:19	–	ibm
Amazon	Important: runc	20 Jan 202200:00	–	amazon
Amazon	Important: runc	18 Nov 202100:00	–	amazon
Amazon	Important: runc	18 Nov 202100:00	–	amazon
Tenable Nessus	Amazon Linux AMI : runc (ALAS-2021-1556)	24 Apr 202500:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0110: container-tools:rhel8 (ALINUX3-SA-2022:0110)	14 May 202500:00	–	nessus
Tenable Nessus	CentOS 8 : container-tools:rhel8 (CESA-2019:4269)	29 Jan 202100:00	–	nessus
Tenable Nessus	CentOS 7 : docker (RHSA-2020:1234)	9 Oct 202400:00	–	nessus