Fedora: Security Advisory for singularity (FEDORA-2021-08df3bb58a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 33 Update: runc-1.0.0-378.rc95.fc33

The runc command can be used to start containers which are packaged in accordance with the Open Container Initiative's specifications, and to manage containers running under runc...

CVE-2020-1702

CVE-2020-1702 : A malicious container image can cause unbounded memory usage when pulled by a container runtime (containers-image) on hosts like RHEL with podman or OpenShift. This affects containers-image versions before 5.2.0; remediation is upgrading to 5.2.0 or later (no exploit details provi...

python27:2.7 security and bug fix update

python2 2.7.18-4.0.1 - Add Oracle Linux distribution in platform.py Orabug: 20812544 2.7.18-4 - Security fix for CVE-2021-3177 Resolves: rhbz1919163 2.7.18-3 - Fixes for bundling prefix=/app build in gimp/inkscape containers Resolves: rhbz1907592 2.7.18-2 - Security fix for CVE-2020-26116: Reject...

Podman Origin Validation Error

Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 including from remote hosts. This impacts containerized applications that trust localhost 127.0.01 connections by default and do not require authentication. This issue affects Podman versions from 1.8.0...

GHSA-GRH6-Q6M2-RH72 Podman Origin Validation Error

Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 including from remote hosts. This impacts containerized applications that trust localhost 127.0.01 connections by default and do not require authentication. This issue affects Podman versions from 1.8.0...

podman: Remote traffic to rootless containers is seen as orginating from localhost

A flaw was found in podman. Rootless containers receive all traffic with a source IP address of 127.0.0.1 including from remote hosts which impact containerized applications that trust localhost 127.0.01 connections by default and do not require authentication. The highest threat from this...

Moderate: Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update

An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

3.6 bug fix and enhancement update

An update is available for apache-commons-io, atinject, jsr-305, maven-shared-utils, plexus-cipher, aopalliance, plexus-classworlds, guava, apache-commons-cli, plexus-containers, plexus-sec-dispatcher, httpcomponents-client, maven-resolver, apache-commons-lang3, plexus-interpolation, sisu,...

Red-Kube - Red Team K8S Adversary Emulation Based On Kubectl

Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing real actions that affect the cluster. The commands...

CVE-2021-31213

Visual Studio Code Remote Containers Extension Remote Code Execution Vulnerability...

CVE-2021-31213

Visual Studio Code Remote Containers Extension Remote Code Execution Vulnerability...

Remote code execution

Visual Studio Code Remote Containers Extension Remote Code Execution Vulnerability...

CVE-2021-31213

Visual Studio Code Remote Containers Extension Remote Code Execution Vulnerability...

CVE-2021-31213

CVE-2021-31213 affects the Visual Studio Code Remote Containers Extension. The vulnerability is a remote code execution weakness in the extension prior to version 0.177.1, exploitable by convincing a user to open specially crafted content. Impact is arbitrary code execution with the victim’s priv...

CVE-2021-31213 Visual Studio Code Remote Containers Extension Remote Code Execution Vulnerability

...

Visual Studio Code Remote Containers Extension Remote Code Execution Vulnerability

...

Microsoft Visual Studio Code 代码注入漏洞

Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Visual Studio Code. The following products and versions are affected: Visual Studio Code Remote - Containers Extension...

PT-2021-3056 · Microsoft · Visual Studio Code +1

Name of the Vulnerable Software and Affected Versions: Visual Studio Code Remote Containers Extension affected versions not specified Description: The issue is related to incorrect code generation management in the Visual Studio Code editor. Exploitation of this issue may allow a remote attacker ...

Security Update for Microsoft Visual Studio Code Remote Containers Extension (May 2021)

The Microsoft Visual Studio Code Remote Containers Extension is prior to version 0.177.1. It is, therefore, affected by a remote code execution vulnerability. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the...