CVE - CVE-2019-5736

CVE-ID
CVE-2019-5736	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to /proc/self/exe.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:106976 URL:http://www.securityfocus.com/bid/106976 CISCO:https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190215-runc CISCO:https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190215-runc URL:https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190215-runc CONFIRM:https://security.netapp.com/advisory/ntap-20190307-0008/ CONFIRM:https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03410944 CONFIRM:https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03913en_us CONFIRM:https://support.mesosphere.com/s/article/Known-Issue-Container-Runtime-Vulnerability-MSPH-2019-0003 CONFIRM:https://www.synology.com/security/advisory/Synology_SA_19_06 EXPLOIT-DB:46359 URL:https://www.exploit-db.com/exploits/46359/ EXPLOIT-DB:46369 URL:https://www.exploit-db.com/exploits/46369/ FEDORA:FEDORA-2019-2baa1f7b19 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EGZKRCKI3Y7FMADO2MENMT4TU24QGHFR/ FEDORA:FEDORA-2019-6174b47003 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SWFJGIPYAAAMVSWWI3QWYXGA3ZBU2H4W/ FEDORA:FEDORA-2019-bc70b381ad URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6A4OSFM5GGOWW4ECELV5OHX2XRAUSPH/ FEDORA:FEDORA-2019-c1dac1b3b8 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DLC52IOJN6IQJWJ6CUI6AIUP6GVVG2QP/ GENTOO:GLSA-202003-21 URL:https://security.gentoo.org/glsa/202003-21 MISC:http://packetstormsecurity.com/files/163339/Docker-Container-Escape.html MISC:http://packetstormsecurity.com/files/165197/Docker-runc-Command-Execution-Proof-Of-Concept.html MISC:https://access.redhat.com/security/cve/cve-2019-5736 MISC:https://access.redhat.com/security/vulnerabilities/runcescape MISC:https://aws.amazon.com/security/security-bulletins/AWS-2019-002/ MISC:https://azure.microsoft.com/en-us/updates/cve-2019-5736-and-runc-vulnerability/ MISC:https://azure.microsoft.com/en-us/updates/iot-edge-fix-cve-2019-5736/ MISC:https://blog.dragonsector.pl/2019/02/cve-2019-5736-escape-from-docker-and.html MISC:https://brauner.github.io/2019/02/12/privileged-containers.html MISC:https://bugzilla.suse.com/show_bug.cgi?id=1121967 MISC:https://cloud.google.com/kubernetes-engine/docs/security-bulletins#february-11-2019-runc MISC:https://github.com/Frichetten/CVE-2019-5736-PoC MISC:https://github.com/docker/docker-ce/releases/tag/v18.09.2 MISC:https://github.com/opencontainers/runc/commit/0a8e4117e7f715d5fbeef398405813ce8e88558b MISC:https://github.com/opencontainers/runc/commit/6635b4f0c6af3810594d2770f662f34ddc15b40d MISC:https://github.com/q3k/cve-2019-5736-poc MISC:https://github.com/rancher/runc-cve MISC:https://kubernetes.io/blog/2019/02/11/runc-and-cve-2019-5736/ MISC:https://www.openwall.com/lists/oss-security/2019/02/11/2 MISC:https://www.twistlock.com/2019/02/11/how-to-mitigate-cve-2019-5736-in-runc-and-docker/ MLIST:[dlab-dev] 20190524 [jira] [Created] (DLAB-723) Runc vulnerability CVE-2019-5736 URL:https://lists.apache.org/thread.html/acacf018c12636e41667e94ac0a1e9244e887eef2debdd474640aa6e@%3Cdev.dlab.apache.org%3E MLIST:[dlab-dev] 20190524 [jira] [Updated] (DLAB-723) Runc vulnerability CVE-2019-5736 URL:https://lists.apache.org/thread.html/a585f64d14c31ab393b90c5f17e41d9765a1a17eec63856ce750af46@%3Cdev.dlab.apache.org%3E MLIST:[dlab-dev] 20190923 [jira] [Assigned] (DLAB-723) Runc vulnerability CVE-2019-5736 URL:https://lists.apache.org/thread.html/24e54e3c6b2259e3903b6b8fe26896ac649c481ea99c5739468c92a3@%3Cdev.dlab.apache.org%3E MLIST:[dlab-dev] 20200525 [jira] [Deleted] (DLAB-723) Runc vulnerability CVE-2019-5736 URL:https://lists.apache.org/thread.html/rc494623986d76593873ce5a40dd69cb3629400d10750d5d7e96b8587@%3Cdev.dlab.apache.org%3E MLIST:[geode-issues] 20200831 [jira] [Created] (GEODE-8471) Dependency security issues in geode-core-1.12 URL:https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2@%3Cissues.geode.apache.org%3E MLIST:[mesos-dev] 20190323 CVE-2019-0204: Some Mesos components can be overwritten making arbitrary code execution possible. URL:https://lists.apache.org/thread.html/b162dd624dc088cd634292f0402282a1d1d0ce853baeae8205bc033c@%3Cdev.mesos.apache.org%3E MLIST:[mesos-user] 20190323 CVE-2019-0204: Some Mesos components can be overwritten making arbitrary code execution possible. URL:https://lists.apache.org/thread.html/a258757af84c5074dc7bf932622020fd4f60cef65a84290380386706@%3Cuser.mesos.apache.org%3E MLIST:[oss-security] 20190323 CVE-2019-0204: Some Mesos components can be overwritten making arbitrary code execution possible. URL:http://www.openwall.com/lists/oss-security/2019/03/23/1 MLIST:[oss-security] 20190628 Re: linux-distros membership application - Microsoft URL:http://www.openwall.com/lists/oss-security/2019/06/28/2 MLIST:[oss-security] 20190706 Re: linux-distros membership application - Microsoft URL:http://www.openwall.com/lists/oss-security/2019/07/06/3 MLIST:[oss-security] 20190706 Re: linux-distros membership application - Microsoft URL:http://www.openwall.com/lists/oss-security/2019/07/06/4 MLIST:[oss-security] 20191023 Membership application for linux-distros - VMware URL:http://www.openwall.com/lists/oss-security/2019/10/24/1 MLIST:[oss-security] 20191029 Re: Membership application for linux-distros - VMware URL:http://www.openwall.com/lists/oss-security/2019/10/29/3 MLIST:[oss-security] 20240201 Re: runc: CVE-2024-21626: high severity container breakout attack URL:http://www.openwall.com/lists/oss-security/2024/02/01/1 MLIST:[oss-security] 20240201 runc: CVE-2024-21626: high severity container breakout attack URL:http://www.openwall.com/lists/oss-security/2024/01/31/6 MLIST:[oss-security] 20240202 Re: Re: runc: CVE-2024-21626: high severity container breakout attack URL:http://www.openwall.com/lists/oss-security/2024/02/02/3 REDHAT:RHSA-2019:0303 URL:https://access.redhat.com/errata/RHSA-2019:0303 REDHAT:RHSA-2019:0304 URL:https://access.redhat.com/errata/RHSA-2019:0304 REDHAT:RHSA-2019:0401 URL:https://access.redhat.com/errata/RHSA-2019:0401 REDHAT:RHSA-2019:0408 URL:https://access.redhat.com/errata/RHSA-2019:0408 REDHAT:RHSA-2019:0975 URL:https://access.redhat.com/errata/RHSA-2019:0975 SUSE:openSUSE-SU-2019:1079 URL:http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00044.html SUSE:openSUSE-SU-2019:1227 URL:http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00074.html SUSE:openSUSE-SU-2019:1275 URL:http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00091.html SUSE:openSUSE-SU-2019:1444 URL:http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00060.html SUSE:openSUSE-SU-2019:1481 URL:http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00073.html SUSE:openSUSE-SU-2019:1499 URL:http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00011.html SUSE:openSUSE-SU-2019:1506 URL:http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00015.html SUSE:openSUSE-SU-2019:2021 URL:http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00084.html SUSE:openSUSE-SU-2019:2245 URL:http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00007.html SUSE:openSUSE-SU-2019:2286 URL:http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00029.html UBUNTU:USN-4048-1 URL:https://usn.ubuntu.com/4048-1/
Assigning CNA
MITRE Corporation
Date Record Created
20190108	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20190108)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)