AZL-25574 CVE-2023-27561 affecting package moby-runc for versions less than 1.1.5-1

runc through 1.1.4 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfslinux.go. To exploit this, an attacker must be able to spawn two containers with custom volume-mount configurations, and be able to run custom images. NOTE: this issue exists because...

CVE-2022-24769 affecting package moby-runc 1.1.0+azure-6

CVE-2022-24769 affecting package moby-runc 1.1.0+azure-6. An upgraded version of the package is available that resolves this issue...

CVE-2022-29162 affecting package moby-runc 1.1.0+azure-6

CVE-2022-29162 affecting package moby-runc 1.1.0+azure-6. An upgraded version of the package is available that resolves this issue...

CVE-2022-24769 affecting package moby-runc for versions less than 1.1.2-2

CVE-2022-24769 affecting package moby-runc for versions less than 1.1.2-2. An upgraded version of the package is available that resolves this issue...

CVE-2022-29162 affecting package moby-runc for versions less than 1.1.2-2

CVE-2022-29162 affecting package moby-runc for versions less than 1.1.2-2. An upgraded version of the package is available that resolves this issue...

CVE-2021-43784 affecting package moby-runc for versions less than 1.1.0-1

CVE-2021-43784 affecting package moby-runc for versions less than 1.1.0-1. An upgraded version of the package is available that resolves this issue...

AZL-9698 CVE-2022-24769 affecting package moby-runc for versions less than 1.1.2-2

Moby is an open-source project created by Docker to enable and accelerate software containerization. A bug was found in Moby Docker Engine prior to version 20.10.14 where containers were incorrectly started with non-empty inheritable Linux process capabilities, creating an atypical Linux...

CVE-2021-43784 affecting package moby-runc 1.0.0~rc95+azure-4

CVE-2021-43784 affecting package moby-runc 1.0.0rc95+azure-4. An upgraded version of the package is available that resolves this issue...

AZL-6682 CVE-2021-43784 affecting package moby-runc for versions less than 1.1.0-1

runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc, netlink is used internally as a serialization system for specifying the relevant container configuration to the C portion of the code responsible for the based namespace setup of container...