ALT-PU-2016-1486-3

Package update runc in branch sisyphus

Version0.1.1-alt1.gitbaf6536

Published2026-06-04

Max severityHIGH

Severity:

Closed issues (3)

HIGH7.8

Уязвимость реализации libcontainer/user/user.go инструмента для запуска изолированных контейнеров Runc, позволяющая нарушителю повысить свои привилегии

Published: 2026-06-02

CVSS 3.xHIGH 7.8

CVSS:3.x/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS 2.0MEDIUM 6.8

CVSS:2.0/AV:L/AC:L/Au:S/C:C/I:C/A:C

References

HIGH7.8

libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric UID as a potential username, which allows local users to gain privileges via a numeric username in the password file in a container.

Published: 2016-06-01Modified: 2026-05-06

CVSS 2.0LOW 2.1

CVSS:2.0/AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS 3.xHIGH 7.8

CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

GHSA-q3j5-32m5-58c2

HIGH7.8

Privilege Elevation in runc

Published: 2021-12-20Modified: 2024-05-20

CVSS 3.xHIGH 7.8

CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References