Lucene search

K
redosRedosROS-20231031-01
HistoryOct 31, 2023 - 12:00 a.m.

ROS-20231031-01

2023-10-3100:00:00
redos.red-soft.ru
9
vulnerability
runc
isolated container
permissions error
sensitive data
integrity compromise
denial of service
unix

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.1 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

8.1%

A vulnerability in the Runc isolated container launch tool is related to improper saving of
permissions. Exploitation of the vulnerability allows an attacker to gain access to sensitive data,
compromise its integrity, and cause a denial of service.

Vulnerability in the Runc isolated container tool is related to incorrect definition of symbolic links before accessing files.
symbolic links before accessing a file. Exploitation of the vulnerability allows an attacker to gain
access to sensitive data, compromise its integrity, and cause a denial of service

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64runc<=ย 1.1.8-1UNKNOWN

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.1 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

8.1%