Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia 7: MGASA-2020-0050 Moderate: AppArmor Bypass in Docker Image

mageia
Calendar Grey January 28, 2020
Dist Mageia Esm H88
Recent updates to opencontainers-runc packages fix a vulnerability related to AppArmor, bolstering security for Mageia users. Discover more.
runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount t...

Summary

runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount targets, and thus a malicious Docker image can mount over a /proc directory (CVE-2019-16884).

References

- https://bugs.mageia.org/show_bug.cgi?id=25806

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/DGK6IV5JGVDXHOXEKJOJWKOVNZLT6MYR/

- https://www.cve.org/CVERecord?id=CVE-2019-16884

Topics%20covered

Topics Covered

security advisory software update apparmor docker restriction bypass mageia mount target

Resolution

SRPMS

- 7/core/opencontainers-runc-1.0.0-0.rc9.3.mga7

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 28 Jan 2020
URL: https://advisories.mageia.org/MGASA-2020-0050.html
Type: security
CVE: CVE-2019-16884

Topics%20covered

Topics Covered

security advisory software update apparmor docker restriction bypass mageia mount target

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here