CVE-2021-3101: Execution with Unnecessary Privileges

Hotdog, prior to v1.0.1, did not mimic the capabilities or the SELinux label of the target JVM process. This would allow a container to gain full privileges on the host, bypassing restrictions set on the container...

Hotdog 安全漏洞

Hotdog is a set of OCI hooks for injecting Log4j Hot Patch into containers. A resource management error vulnerability exists in Hotdog versions prior to v1.0.2, which arises from an application that does not effectively perform resource limiting, device limiting, or syscall filters on the target...

PT-2021-6934

Name of the Vulnerable Software and Affected Versions Hotdog versions prior to 1.0.2 Description The issue is related to incomplete fix and access control errors in the OCI Open Container Initiative function set. This could allow an attacker to elevate their privileges, exhaust the resources of t...