Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
suseSuseOPENSUSE-SU-2019:1481-1
HistoryMay 31, 2019 - 12:00 a.m.

Security update for lxc, lxcfs (important)

2019-05-3100:00:00
lists.opensuse.org
337

8.6 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

64.0%

JSON

An update that fixes 6 vulnerabilities is now available.

Description:

This update for lxc, lxcfs to version 3.1.0 fixes the following issues:

Security issues fixed:

  • CVE-2019-5736: Fixed a container breakout vulnerability (boo#1122185).
  • CVE-2018-6556: Enable setuid bit on lxc-user-nic (boo#988348).

Non-security issues fixed:

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 42.3:

    zypper in -t patch openSUSE-2019-1481=1

OSVersionArchitecturePackageVersionFilename
openSUSE Leap42.3i586< - openSUSE Leap 42.3 (i586 x86_64):- openSUSE Leap 42.3 (i586 x86_64):.i586.rpm
openSUSE Leap42.3x86_64< - openSUSE Leap 42.3 (i586 x86_64):- openSUSE Leap 42.3 (i586 x86_64):.x86_64.rpm
openSUSE Leap42.3x86_64< - openSUSE Leap 42.3 (x86_64):- openSUSE Leap 42.3 (x86_64):.x86_64.rpm
openSUSE Leap42.3noarch< - openSUSE Leap 42.3 (noarch):- openSUSE Leap 42.3 (noarch):.noarch.rpm

Related

nessus 47
openvas 36
securityvulns 2
fedora 15
debian 4
mageia 4
ubuntu 4
osv 5
oraclelinux 4
suse 8
prion 6
debiancve 5
veracode 2
archlinux 2
ubuntucve 6
cve 6
gentoo 1
alpinelinux 2
ibm 4
impervablog 1
githubexploit 4
hackerone 3
zdt 2
redhat 5
photon 2
threatpost 3
vmware 2
exploitpack 1
f5 1
virtuozzo 1
amazon 1
trendmicroblog 2
redhatcve 1
qualysblog 1
thn 2
altlinux 1
cbl_mariner 1
kitploit 1
almalinux 1
nessus
nessus
openSUSE Security Update : lxc / lxcfs (openSUSE-2019-1481)
2019-06-03 00:00:00
Fedora 21 : lxc-1.0.7-2.fc21 (2015-12645)
2015-08-11 00:00:00
Fedora 23 : lxc-1.1.2-2.fc23 (2015-12608)
2015-08-11 00:00:00
openvas
openvas
openSUSE: Security Advisory for lxc, lxcfs (openSUSE-SU-2019:1481-1)
2019-06-02 00:00:00
Ubuntu: Security Advisory (USN-2675-1)
2015-07-23 00:00:00
Mageia: Security Advisory (MGASA-2015-0304)
2015-10-15 00:00:00
securityvulns
securityvulns
LXC directory traversal
2015-07-27 00:00:00
[USN-2675-1] LXC vulnerabilities
2015-07-27 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: lxc-1.1.2-2.fc22
2015-08-11 02:11:29
[SECURITY] Fedora 21 Update: lxc-1.0.7-2.fc21
2015-08-11 02:13:05
[SECURITY] Fedora 23 Update: lxc-1.1.2-2.fc23
2015-08-10 10:06:03
debian
debian
[SECURITY] [DSA 3317-1] lxc security update
2015-07-25 14:54:05
[SECURITY] [DSA 3317-1] lxc security update
2015-07-25 14:54:05
[SECURITY] [DSA 3400-1] lxc security update
2015-11-19 19:55:59
mageia
mageia
Updated lxc package fixes security vulnerability
2015-08-07 22:20:18
Updated lxc packages fix security vulnerability
2016-01-29 14:02:50
Updated lxc packages fix security vulnerability
2019-02-17 03:31:02
ubuntu
ubuntu
LXC vulnerabilities
2015-07-22 00:00:00
LXC vulnerability
2018-08-06 00:00:00
LXC vulnerability
2017-03-09 00:00:00
osv
osv
lxc - security update
2015-07-25 00:00:00
CVE-2017-5985
2017-03-14 17:59:00
CVE-2018-6556
2018-08-10 15:29:01
oraclelinux
oraclelinux
lxc security update
2015-07-31 00:00:00
lxc security update
2015-10-15 00:00:00
runc bug fix update
2021-04-28 00:00:00
suse
suse
Security update for lxc, lxcfs (important)
2019-04-25 00:00:00
Security update for lxc, lxcfs (important)
2019-04-17 00:00:00
Security update for lxc (moderate)
2019-04-18 00:00:00
prion
prion
Code injection
2017-03-14 17:59:00
Design/Logic Flaw
2018-08-10 15:29:00
Code injection
2015-08-12 14:59:00
debiancve
debiancve
CVE-2015-1331
2015-08-12 14:59:00
CVE-2015-1334
2015-08-12 14:59:00
CVE-2017-5985
2017-03-14 17:59:00
veracode
veracode
Authorization Bypass
2020-12-06 04:35:17
Malicious Container Execution
2019-02-12 02:31:29
archlinux
archlinux
[ASA-201705-17] lxc: insufficient validation
2017-05-13 00:00:00
[ASA-201902-6] runc: privilege escalation
2019-02-11 00:00:00
ubuntucve
ubuntucve
CVE-2018-6556
2018-08-06 00:00:00
CVE-2017-5985
2017-03-09 00:00:00
CVE-2015-1331
2015-07-22 00:00:00
cve
cve
CVE-2018-6556
2018-08-10 15:29:00
CVE-2015-1334
2015-08-12 14:59:00
CVE-2015-1331
2015-08-12 14:59:00
gentoo
gentoo
LinuX Containers user space utilities: Arbitrary file read
2018-08-22 00:00:00
alpinelinux
alpinelinux
CVE-2018-6556
2018-08-10 15:29:00
CVE-2019-5736
2019-02-11 19:29:00
ibm
ibm
Security Bulletin: IBM Cloud Private for Data is affected by an issue with runc used by Docker
2019-10-03 22:50:40
Security Bulletin: IBM Cloud Functions is affected by a privilege escalation vulnerability in runc
2019-02-18 20:15:01
Security Bulletin: IBM API Connect is affected by a critical vulnerability in Kubernetes via runc (CVE-2019-5736)
2019-03-05 17:05:02
impervablog
impervablog
Hundreds of Vulnerable Docker Hosts Exploited by Cryptocurrency Miners
2019-03-04 21:00:39
githubexploit
githubexploit
Exploit for OS Command Injection in Docker
2019-06-30 13:42:14
Exploit for OS Command Injection in Docker
2019-12-12 16:57:13
Exploit for OS Command Injection in Docker
2021-07-08 22:46:30
hackerone
hackerone
Internet Bug Bounty: CVE-2019-5736: Escape from Docker and Kubernetes containers to root on host
2019-02-13 18:50:11
50m-ctf: CTF write-up: c8889970d9fb722066f31e804e351993
2019-03-03 10:08:22
50m-ctf: $50 million CTF Writeup
2019-03-25 02:28:13
zdt
zdt
runc < 1.0-rc6 (Docker < 18.09.2) - Container Breakout (2)
2019-02-15 00:00:00
runC < 1.0-rc6 (Docker < 18.09.2) - Host Command Execution Exploit
2019-02-12 00:00:00
redhat
redhat
(RHSA-2019:0303) Important: runc security update
2019-02-11 14:24:53
(RHSA-2019:0304) Important: docker security update
2019-02-11 14:26:20
(RHSA-2019:0408) Important: OpenShift Container Platform 3.4, 3.5, 3.6, and 3.7 security update
2019-02-26 09:31:21
photon
photon
Important Photon OS Security Update - PHSA-2019-0001
2019-02-12 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-1.0-0208
2019-02-12 00:00:00
threatpost
threatpost
Public Clouds & Shared Responsibility: Lessons from Vulnerability Disclosure
2021-10-26 21:22:26
Major Container Security Flaw Threatens Cascading Attacks
2019-02-12 18:28:41
Rethinking Cyber-Defense Strategies in the Public-Cloud Age
2022-04-19 17:29:49
vmware
vmware
VMware product updates resolve mishandled file descriptor vulnerability in runc container runtime.
2019-02-15 00:00:00
VMware product updates resolve mishandled file descriptor vulnerability in runc container runtime.
2019-02-15 00:00:00
exploitpack
exploitpack
runc 1.0-rc6 (Docker 18.09.2) - Container Breakout (2)
2019-02-13 00:00:00
f5
f5
K46421255 : Docker privilege elevation vulnerability CVE-2019-5736
2019-03-01 00:00:00
virtuozzo
virtuozzo
Important kernel security update: Virtuozzo ReadyKernel patch 72.0 for all supported Virtuozzo kernels and that of Virtuozzo Infrastructure Platform 2.5
2019-02-12 00:00:00
amazon
amazon
Important: docker
2019-02-08 22:28:00
trendmicroblog
trendmicroblog
This Week in Security News: Instagram Hackers and Enterprise Threats
2019-03-01 14:57:50
Attacking Containers and runC
2019-02-12 19:22:35
redhatcve
redhatcve
CVE-2019-5736
2020-01-11 09:33:43
qualysblog
qualysblog
RunC Container Breakout Vulnerability
2019-02-12 15:46:10
thn
thn
Microsoft Warns of Cross-Account Takeover Bug in Azure Container Instances
2021-09-10 05:07:00
RunC Flaw Lets Attackers Escape Linux Containers to Gain Root on Hosts
2019-02-12 08:59:00
altlinux
altlinux
Security fix for the ALT Linux 8 package runc version 1.0.0-alt7.git0a012df
2019-02-20 00:00:00
cbl_mariner
cbl_mariner
CVE-2019-5736 affecting package moby-buildx 0.4.1-3
2021-07-08 21:56:42
kitploit
kitploit
Whoc - A Container Image That Extracts The Underlying Container Runtime
2021-11-24 11:30:00
almalinux
almalinux
Important: container-tools:rhel8 security and bug fix update
2019-05-07 03:39:11

8.6 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

64.0%

JSON
Related for OPENSUSE-SU-2019:1481-1
nessus47openvas36securityvulns2fedora15debian4mageia4ubuntu4osv5oraclelinux4suse8prion6debiancve5veracode2archlinux2ubuntucve6cve6gentoo1alpinelinux2ibm4impervablog1githubexploit4hackerone3zdt2redhat5photon2threatpost3vmware2exploitpack1f51virtuozzo1amazon1trendmicroblog2redhatcve1qualysblog1thn2altlinux1cbl_mariner1kitploit1almalinux1