PT-2019-18038

Name of the Vulnerable Software and Affected Versions iOS versions prior to 12.1.3 macOS Mojave versions prior to 10.14.3 tvOS versions prior to 12.1.2 watchOS versions prior to 5.1.3 Description A memory initialization issue was addressed with improved memory handling. A malicious application ma...

PT-2019-18029

Name of the Vulnerable Software and Affected Versions iOS versions prior to 12.1.3 macOS Mojave versions prior to 10.14.3 tvOS versions prior to 12.1.2 watchOS versions prior to 5.1.3 Description A type confusion issue was addressed with improved memory handling. A malicious application may be ab...

openSUSE: Security Advisory for docker-runc (openSUSE-SU-2019:0252-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for docker-runc (important)

openSUSE Security Update: Security update for docker-runc Announcement ID: openSUSE-SU-2019:0252-1 Rating: important References: 1121967 Cross-References: CVE-2019-5736 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for...

SUSE SLED15 / SLES15 Security Update : containerd, docker, docker-runc, golang-github-docker-libnetwork, runc (SUSE-SU-2019:0495-1)

This update for containerd, docker, docker-runc, golang-github-docker-libnetwork, runc fixes the following issues : Security issues fixed : CVE-2018-16875: Fixed a CPU Denial of Service bsc1118899. CVE-2018-16874: Fixed a vulnerabity in go get command which could allow directory traversal in GOPA...

SUSE-SU-2019:0495-1 Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork, runc

This update for containerd, docker, docker-runc, golang-github-docker-libnetwork, runc fixes the following issues: Security issues fixed: - CVE-2018-16875: Fixed a CPU Denial of Service bsc1118899. - CVE-2018-16874: Fixed a vulnerabity in go get command which could allow directory traversal in...

ThreatList: APT Adversaries Up the Ante on Speed, Target Telecom

Despite law-enforcement wins in the form of several high-profile arrests and indictments during 2018, nation-state adversaries have upped their games when it comes to speed. That’s according to CrowdStrike’s 2019 Global Threat Report, which found that when analyzing how long it takes to go from...

openSUSE Security Update : docker-runc (openSUSE-2019-201)

This update for docker-runc fixes the following issues : Security issue fixed : - CVE-2019-5736: Effectively copying /proc/self/exe during re-exec to avoid write attacks to the host runc binary, which could lead to a container breakout bsc1121967 This update was imported from the SUSE:SLE-12:Upda...

Security update for docker-runc (important)

openSUSE Security Update: Security update for docker-runc Announcement ID: openSUSE-SU-2019:0201-1 Rating: important References: 1121967 Cross-References: CVE-2019-5736 Affected Products: openSUSE Leap 42.3 An update that fixes one vulnerability is now available. Description: This update for...

runc < 1.0-rc6 (Docker < 18.09.2) - Container Breakout (2)

Exploit for linux platform in category local exploits runc . + constructed fdpath + badinit is ready -- see for logs. dying to allow /proc/self/exe to be unused... % cat /usr/sbin/docker-runc !/bin/bash touch /w00tw00t ; cat /etc/shadow And now if you try to use Docker normally, t...

SUSE SLES15 Security Update : docker-runc (SUSE-SU-2019:0362-1)

This update for docker-runc fixes the following issues : Security issue fixed : CVE-2019-5736: Effectively copying /proc/self/exe during re-exec to avoid write attacks to the host runc binary, which could lead to a container breakout bsc1121967 Note that Tenable Network Security has extracted the...

SUSE-SU-2019:0385-1 Security update for docker-runc

This update for docker-runc fixes the following issues: Security issue fixed: - CVE-2019-5736: Effectively copying /proc/self/exe during re-exec to avoid write attacks to the host runc binary, which could lead to a container breakout bsc1121967...

OPENSUSE-SU-2019:0170-1 Security update for runc

This update for runc fixes the following issues: Security vulnerabilities addressed: - CVE-2019-5736: Effectively copying /proc/self/exe during re-exec to avoid write attacks to the host runc binary, which could lead to a container breakout bsc1121967 - CVE-2018-16873: Fix a remote command...

SUSE-SU-2019:0362-1 Security update for docker-runc

This update for docker-runc fixes the following issues: Security issue fixed: - CVE-2019-5736: Effectively copying /proc/self/exe during re-exec to avoid write attacks to the host runc binary, which could lead to a container breakout bsc1121967...

runc 1.0-rc6 (Docker 18.09.2) - Container Breakout (2)

runc 1.0-rc6 Docker 18.09.2 - Container Breakout 2 CVE-2019-5736 This is exploit code for CVE-2019-5736 and it works for both runc and LXC. The simplest way to use it is to copy the exploit code into an existing container, and run make.sh. However, you could just as easily create a bad image and...

Security update for runc (important)

openSUSE Security Update: Security update for runc Announcement ID: openSUSE-SU-2019:0170-1 Rating: important References: 1095817 1118897 1118898 1118899 1121967 Cross-References: CVE-2018-16873 CVE-2018-16874 CVE-2018-16875 CVE-2019-5736 Affected Products: openSUSE Backports SLE-15 An update tha...

CVE-2019-5736: runC container breakout | Cloud Foundry

Severity High Vendor Open Container Initiative Affected Cloud Foundry Products and Versions Severity is High unless otherwise noted. BPM All prior to v1.0.3 Cloud Foundry Container Runtime CFCR All versions prior to v0.29.0 Docker BOSH Release All versions prior to v34.0.0 Garden runC All version...

runc < 1.0-rc6 (Docker < 18.09.2) - Container Breakout (2)

CVE-2019-5736 This is exploit code for CVE-2019-5736 and it works for both runc and LXC. The simplest way to use it is to copy the exploit code into an existing container, and run make.sh. However, you could just as easily create a bad image and run that. console % docker run --rm --name pwnme -d...

Attacking Containers and runC

This week a new vulnerability was published CVE-2019-5736 that highlights everything bad and good about containers. Simply put, this vulnerability can be exploited using an infected container to attack the host. It’s a real world example of a breakout attack that has long been a major concern in...

runc < 1.0-rc6 (Docker < 18.09.2) - Container Breakout (1)

Usage Edit HOST inside payload.c, compile with make. Start nc and run pwn.sh inside the container. Notes - This exploit is destructive: it'll overwrite /usr/bin/docker-runc binary on the host with the payload. It'll also overwrite /bin/sh inside the container. - Tested only on Debian 9. - No...