The vulnerability of the libcontainer/user/user.go implementation, a tool for running isolated containers in Runc, allows a malicious actor to escalate their privileges.

The vulnerability of the libcontainer/user/user.go implementation, a tool for running isolated containers in Runc, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges...

MGASA-2021-0412 Updated opencontainers-runc packages fix security vulnerability

runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be able to create multiple containers with a fairly specific mount configuration. The problem occurs via a symlink-exchange attack that relies on a race condition...