CVE-2019-10144

CVE-2019-10144 affects rkt up to version 1.30.0. In containers started with rkt enter, processes are granted all capabilities during stage 2, which could allow compromised containers to access host resources. The connected documents confirm the root cause is lack of isolation in this scenario and...

CVE-2019-10145

CVE-2019-10145 affects rkt up to version 1.30.0. The issue: containers started with rkt enter do not isolate processes and lack seccomp filtering during stage 2, allowing a compromised container to access host resources. Documents consistently describe the vulnerability without providing explicit...

CVE-2019-10147

CVE-2019-10147 affects rkt (through version 1.30.0). The issue is that containers started with rkt enter are not isolated by cgroups during stage 2, allowing processes run within those containers to access host resources. The connected documents reiterate that this limitation can enable compromis...