cve-2019-5736-poc

CVE-2019-5736 Доказательство концепции Это добавляет строку в бинарный файл runc на хосте. Используйте собственный пэйлоад см. stage2.c. Для запуска: docker build -t cve . docker run cve strings /usr/bin/docker-runc | tail -n 2...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.58 bug fix and security update

Red Hat OpenShift Container Platform release 4.17.58 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a...

CVE-2025-9074

CVE-2025-9074 – Полный выход из Docker на Windows и macOS Docker Desktop 📌 Описание Docker Desktop открывает внутренний API Docker Engine по адресу http://192.168.65.7:2375 для любого работающего контейнера — без аутентификации и без контроля доступа. Поскольку сам движок может монтировать файлов...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.56 security and extras update

Red Hat OpenShift Container Platform release 4.18.56 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a security impact of...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.58 security and extras update

Red Hat OpenShift Container Platform release 4.17.58 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a security impact of...

CVE-2026-96577

A flaw was found in oc-mirror. During mirroring operations, the embedded local cache registry binds to all network interfaces without authentication or encryption instead of restricting access to the local system. An unauthenticated attacker on an adjacent network can connect to the exposed servi...

EUVD-2026-90590

A flaw was found in oc-mirror. During mirroring operations, the embedded local cache registry binds to all network interfaces without authentication or encryption instead of restricting access to the local system. An unauthenticated attacker on an adjacent network can connect to the exposed servi...

CVE-2026-96577

A vulnerability exists in oc-mirror (specifically identified in release-4.21 ) where the embedded local cache registry binds to all network interfaces during mirroring operations. The service lacks authentication and encryption , failing to restrict access to the local system. An unauthenticated ...

K000163497: Podman vulnerability CVE-2024-11218

Security Advisory Description A vulnerability was found in podman build and buildah. This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of...

podman: podman: The `podman run` command can be instructed to disable almost all sandboxing - including user-requested sandboxing - by image annotation

A flaw was found in Podman. When a container image with checkpoint annotations is executed using the podman run command, Podman treats the image as a restored checkpoint and ignores user-specified sandboxing options, such as dropped privileges. An attacker can exploit this issue by enticing a use...

AlmaLinux 9.6 [TuxCare] Security Update: podman / podman-docker / podman-plugins / podman-remote / etc (ALMALINUX9.6:CLSA-2026:1782987821)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782987821 advisory. - Podman is a tool for managing OCI containers and pods. From 3.0.0 until 5.7.1, running a malicious container image where the WORKDIR path...

Rocky Linux 8 [CIQ] Security Update: aardvark-dns / buildah / buildah-debuginfo / buildah-debugsource / etc (crlsa-2024_2098)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20242098 advisory. podman: full container escape at build time CVE-2024-1753 This advisory is provided by Ctrl IQ, Inc for Rocky Linux systems. For more information about CIQ security...

Rocky Linux 10.1 [CIQ] Security Update: podman / podman-debuginfo / podman-debugsource / podman-docker / etc (crlsa-2025_21220)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202521220 advisory. runc: container escape and denial of service due to arbitrary write gadgets and procfs write redirects CVE-2025-52881 Tenable has extracted the preceding...

Rocky Linux 8 [CIQ] Security Update: aardvark-dns / buildah / buildah-debuginfo / buildah-debugsource / etc Multiple Vulnerabilities (crlsa-2024_3254)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20243254 advisory. buildah: full container escape at build time CVE-2024-1753 golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters...

CVE-2026-96577: Missing Authentication for Critical Function

A flaw was found in oc-mirror. During mirroring operations, the embedded local cache registry binds to all network interfaces without authentication or encryption instead of restricting access to the local system. An unauthenticated attacker on an adjacent network can connect to the exposed servi...

Rocky Linux 8 [CIQ] Security Update: oci-systemd-hook / oci-systemd-hook-debuginfo / etc (crlsa-2019_0975)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20190975 advisory. A flaw was found in the way runc handled system file descriptors when running containers. A malicious container could use this flaw to overwrite contents of the run...

Rocky Linux 8.6 [CIQ] Security Update: systemd / systemd-container / systemd-container-debuginfo / etc (ciqsa-2026_0266)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260266 advisory. This advisory aggregates security fixes for the systemd SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2022-3821. Tenable has extracted the preceding description...

Rocky Linux 8 [CIQ] Security Update: buildah / buildah-debuginfo / buildah-debugsource / buildah-tests / etc (crlba-2022_0348)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlba-20220348 advisory. The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. For detailed information on changes in this releas...

Rocky Linux 8.6 [CIQ] Security Update: container-selinux Multiple Vulnerabilities (ciqsa-2026_0855)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260855 advisory. This advisory aggregates security fixes for the container-selinux SRPM in CIQ LTS 8.6. It addresses 37 CVEs: CVE-2021-36221, CVE-2021-41190, CVE-2022-170...

PT-2026-103761

A flaw was found in oc-mirror. During mirroring operations, the embedded local cache registry binds to all network interfaces without authentication or encryption instead of restricting access to the local system. An unauthenticated attacker on an adjacent network can connect to the exposed servi...