CVE-2019-5736
Fixed in a distro release EPSS 98%
runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to /proc/self/exe.
Products: docker, linuxfoundation runc, redhat container_development_kit, redhat openshift, redhat enterprise_linux, redhat enterprise_linux_server, google kubernetes_engine, linuxcontainers lxc, hp onesphere, netapp hci_management_node, netapp solidfire, apache mesos, opensuse backports_sle, opensuse leap, d2iq kubernetes_engine, d2iq dc/os, fedoraproject fedora, canonical ubuntu_linux, microfocus service_management_automation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | oci-systemd-hook | 1:0.1.15-2.git2d0b8a3.module_el8.5.0+119+9a9ec082 |
| AlmaLinux 8 | oci-systemd-hook | 1:0.1.15-2.git2d0b8a3.module_el8.4.0+2496+12421f43 |
| AlmaLinux 8 | oci-systemd-hook | 1:0.1.15-2.git2d0b8a3.module_el8.3.0+2044+12421f43 |
| AlmaLinux 8 | oci-umount | 2:2.3.4-2.git87f9237.module_el8.5.0+119+9a9ec082 |
| AlmaLinux 8 | oci-umount | 2:2.3.4-2.git87f9237.module_el8.4.0+2496+12421f43 |
| AlmaLinux 8 | oci-umount | 2:2.3.4-2.git87f9237.module_el8.3.0+2044+12421f43 |
| Alpine 3.10 | lxc | 3.1.0-r1 |
| Alpine 3.11 | lxc | 3.1.0-r1 |
| Alpine 3.12 | lxc | 3.1.0-r1 |
| Alpine 3.13 | lxc | 3.1.0-r1 |
| Alpine 3.14 | lxc | 3.1.0-r1 |
| Alpine 3.15 | lxc | 3.1.0-r1 |
| Alpine 3.16 | lxc | 3.1.0-r1 |
| Alpine 3.17 | lxc | 3.1.0-r1 |
| Alpine 3.18 | lxc | 3.1.0-r1 |
| Alpine 3.19 | lxc | 3.1.0-r1 |
| Alpine 3.20 | lxc | 3.1.0-r1 |
| Alpine 3.21 | lxc | 3.1.0-r1 |
| Alpine 3.22 | lxc | 3.1.0-r1 |
| Alpine 3.23 | lxc | 3.1.0-r1 |
| Alpine 3.24 | lxc | 3.1.0-r1 |
| Alpine 3.9 | lxc | 3.1.0-r1 |
| Arch Linux | flatpak | 1.2.3-1 |
| Arch Linux | runc | 1.0.0rc6-1 |
| Chainguard | py3-docker | 0 |
| Chainguard | py3.10-docker | 0 |
| Chainguard | py3.11-docker | 0 |
| Chainguard | py3.12-docker | 0 |
| Chainguard | py3.13-docker | 0 |
| Debian 12 | lxc | 1:3.1.0+really3.0.3-4 |
| Debian 12 | runc | 1.0.0~rc6+dfsg1-2 |
| Debian 13 | lxc | 1:3.1.0+really3.0.3-4 |
| Debian 13 | runc | 1.0.0~rc6+dfsg1-2 |
| Debian 14 | lxc | 1:3.1.0+really3.0.3-4 |
| Debian 14 | runc | 1.0.0~rc6+dfsg1-2 |
| Red Hat Enterprise Linux 8 | buildah | 0:1.5-3.gite94b4f9.module+el8.0.0+2958+4e823551 |
| Red Hat Enterprise Linux 8 | buildah-debuginfo | 0:1.5-3.gite94b4f9.module+el8.0.0+2958+4e823551 |
| Red Hat Enterprise Linux 8 | buildah-debugsource | 0:1.5-3.gite94b4f9.module+el8.0.0+2958+4e823551 |
| Red Hat Enterprise Linux 8 | container-selinux | 2:2.94-1.git1e99f1d.module+el8.0.0+2958+4e823551 |
| Red Hat Enterprise Linux 8 | containernetworking-plugins | 0:0.7.4-3.git9ebe139.module+el8.0.0+2958+4e823551 |
| Red Hat Enterprise Linux 8 | containernetworking-plugins-debuginfo | 0:0.7.4-3.git9ebe139.module+el8.0.0+2958+4e823551 |
| Red Hat Enterprise Linux 8 | containernetworking-plugins-debugsource | 0:0.7.4-3.git9ebe139.module+el8.0.0+2958+4e823551 |
| Red Hat Enterprise Linux 8 | containers-common | 1:0.1.32-3.git1715c90.module+el8.0.0+2958+4e823551 |
| Red Hat Enterprise Linux 8 | fuse-overlayfs | 0:0.3-2.module+el8.0.0+2958+4e823551 |
| Red Hat Enterprise Linux 8 | fuse-overlayfs-debuginfo | 0:0.3-2.module+el8.0.0+2958+4e823551 |
| Red Hat Enterprise Linux 8 | fuse-overlayfs-debugsource | 0:0.3-2.module+el8.0.0+2958+4e823551 |
| Red Hat Enterprise Linux 8 | oci-systemd-hook | 1:0.1.15-2.git2d0b8a3.module+el8.0.0+2958+4e823551 |
| Red Hat Enterprise Linux 8 | oci-systemd-hook-debuginfo | 1:0.1.15-2.git2d0b8a3.module+el8.0.0+2958+4e823551 |
| Red Hat Enterprise Linux 8 | oci-systemd-hook-debugsource | 1:0.1.15-2.git2d0b8a3.module+el8.0.0+2958+4e823551 |
| Red Hat Enterprise Linux 8 | oci-umount | 2:2.3.4-2.git87f9237.module+el8.0.0+2958+4e823551 |
| Red Hat Enterprise Linux 8 | oci-umount-debuginfo | 2:2.3.4-2.git87f9237.module+el8.0.0+2958+4e823551 |
| Red Hat Enterprise Linux 8 | oci-umount-debugsource | 2:2.3.4-2.git87f9237.module+el8.0.0+2958+4e823551 |
| Red Hat Enterprise Linux 8 | podman | 0:1.0.0-2.git921f98f.module+el8.0.0+2958+4e823551 |
| Red Hat Enterprise Linux 8 | podman-debuginfo | 0:1.0.0-2.git921f98f.module+el8.0.0+2958+4e823551 |
| Red Hat Enterprise Linux 8 | podman-debugsource | 0:1.0.0-2.git921f98f.module+el8.0.0+2958+4e823551 |
| Red Hat Enterprise Linux 8 | podman-docker | 0:1.0.0-2.git921f98f.module+el8.0.0+2958+4e823551 |
| Red Hat Enterprise Linux 8 | runc | 0:1.0.0-55.rc5.dev.git2abd837.module+el8.0.0+3049+59fd2bba |
| Red Hat Enterprise Linux 8 | runc-debuginfo | 0:1.0.0-55.rc5.dev.git2abd837.module+el8.0.0+3049+59fd2bba |
| Red Hat Enterprise Linux 8 | runc-debugsource | 0:1.0.0-55.rc5.dev.git2abd837.module+el8.0.0+3049+59fd2bba |
| Red Hat Enterprise Linux 8 | skopeo | 1:0.1.32-3.git1715c90.module+el8.0.0+2958+4e823551 |
| Red Hat Enterprise Linux 8 | skopeo-debuginfo | 1:0.1.32-3.git1715c90.module+el8.0.0+2958+4e823551 |
| Red Hat Enterprise Linux 8 | skopeo-debugsource | 1:0.1.32-3.git1715c90.module+el8.0.0+2958+4e823551 |
| Red Hat Enterprise Linux 8 | slirp4netns | 0:0.1-2.dev.gitc4e1bc5.module+el8.0.0+2958+4e823551 |
| Red Hat Enterprise Linux 8 | slirp4netns-debuginfo | 0:0.1-2.dev.gitc4e1bc5.module+el8.0.0+2958+4e823551 |
| Red Hat Enterprise Linux 8 | slirp4netns-debugsource | 0:0.1-2.dev.gitc4e1bc5.module+el8.0.0+2958+4e823551 |
| Red Hat openshift 3.4 | docker | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.4 | docker-client | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.4 | docker-common | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.4 | docker-debuginfo | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.4 | docker-logrotate | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.4 | docker-lvm-plugin | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.4 | docker-novolume-plugin | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.4 | docker-rhel-push-plugin | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.4 | docker-unit-test | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.4 | docker-v1.10-migrator | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.5 | docker | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.5 | docker-client | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.5 | docker-common | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.5 | docker-debuginfo | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.5 | docker-logrotate | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.5 | docker-lvm-plugin | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.5 | docker-novolume-plugin | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.5 | docker-rhel-push-plugin | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.5 | docker-unit-test | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.5 | docker-v1.10-migrator | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.6 | docker | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.6 | docker-client | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.6 | docker-common | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.6 | docker-debuginfo | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.6 | docker-logrotate | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.6 | docker-lvm-plugin | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.6 | docker-novolume-plugin | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.6 | docker-rhel-push-plugin | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.6 | docker-unit-test | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.6 | docker-v1.10-migrator | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.7 | docker | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.7 | docker-client | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.7 | docker-common | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.7 | docker-debuginfo | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.7 | docker-logrotate | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.7 | docker-lvm-plugin | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.7 | docker-novolume-plugin | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.7 | docker-rhel-push-plugin | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.7 | docker-unit-test | 2:1.12.6-79.git5680db5.el7 |
| Red Hat openshift 3.7 | docker-v1.10-migrator | 2:1.12.6-79.git5680db5.el7 |
| Red Hat rhel extras other 7 | docker | 2:1.13.1-91.git07f3374.el7 |
| Red Hat rhel extras other 7 | docker-client | 2:1.13.1-91.git07f3374.el7 |
| Red Hat rhel extras other 7 | docker-common | 2:1.13.1-91.git07f3374.el7 |
| Red Hat rhel extras other 7 | docker-debuginfo | 2:1.13.1-91.git07f3374.el7 |
| Red Hat rhel extras other 7 | docker-logrotate | 2:1.13.1-91.git07f3374.el7 |
| Red Hat rhel extras other 7 | docker-lvm-plugin | 2:1.13.1-91.git07f3374.el7 |
| Red Hat rhel extras other 7 | docker-novolume-plugin | 2:1.13.1-91.git07f3374.el7 |
| Red Hat rhel extras other 7 | docker-rhel-push-plugin | 2:1.13.1-91.git07f3374.el7 |
| Red Hat rhel extras other 7 | docker-v1.10-migrator | 2:1.13.1-91.git07f3374.el7 |
| Red Hat rhel extras other 7 | runc | 0:1.0.0-59.dev.git2abd837.el7 |
| Red Hat rhel extras other 7 | runc-debuginfo | 0:1.0.0-59.dev.git2abd837.el7 |
| Rocky Linux 8 | oci-systemd-hook | 1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f |
| Rocky Linux 8 | oci-umount | 2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f |
| SUSE Linux Enterprise Module for Containers 12 | containerd | 1.2.6-16.23.1 |
| SUSE Linux Enterprise Module for Containers 12 | containerd | 1.4.4-16.38.1 |
| SUSE Linux Enterprise Module for Containers 12 | containerd | 1.2.2-16.14.2 |
| SUSE Linux Enterprise Module for Containers 12 | docker | 20.10.6_ce-98.66.1 |
| SUSE Linux Enterprise Module for Containers 12 | docker | 18.09.1_ce-98.34.2 |
| SUSE Linux Enterprise Module for Containers 12 | docker | 19.03.1_ce-98.46.1 |
| SUSE Linux Enterprise Module for Containers 12 | docker-runc | 1.0.0rc8+gitr3826_425e105d5a03-1.29.1 |
| SUSE Linux Enterprise Module for Containers 12 | docker-runc | 1.0.0rc6+gitr3748_96ec2177ae84-1.17.2 |
| SUSE Linux Enterprise Module for Containers 12 | docker-runc | 1.0.0rc5+gitr3562_69663f0bd4b6-1.9.1 |
| SUSE Linux Enterprise Module for Containers 12 | golang-github-docker-libnetwork | 0.7.0.1+gitr2711_2cfbf9b1f981-16.2 |
| SUSE Linux Enterprise Module for Containers 12 | golang-github-docker-libnetwork | 0.7.0.1+gitr2800_fc5a7d91d54c-25.1 |
| SUSE Linux Enterprise Module for Containers 12 | runc | 1.0.0~rc93-16.8.1 |
| SUSE Linux Enterprise Module for Containers 15 | containerd | 1.2.5-5.13.1 |
| SUSE Linux Enterprise Module for Containers 15 | containerd | 1.2.6-5.16.1 |
| SUSE Linux Enterprise Module for Containers 15 | containerd | 1.2.2-5.9.1 |
| SUSE Linux Enterprise Module for Containers 15 | docker | 18.09.6_ce-6.17.1 |
| SUSE Linux Enterprise Module for Containers 15 | docker | 19.03.1_ce-6.26.2 |
| SUSE Linux Enterprise Module for Containers 15 | docker | 18.09.1_ce-6.14.1 |
| SUSE Linux Enterprise Module for Containers 15 | docker-runc | 1.0.0rc5+gitr3562_69663f0bd4b6-6.9.1 |
| SUSE Linux Enterprise Module for Containers 15 | docker-runc | 1.0.0rc8+gitr3826_425e105d5a03-6.21.2 |
| SUSE Linux Enterprise Module for Containers 15 | docker-runc | 1.0.0rc6+gitr3748_96ec2177ae84-6.12.1 |
| SUSE Linux Enterprise Module for Containers 15 | docker-runc | 1.0.0rc6+gitr3804_2b18fe1d885e-6.18.1 |
| SUSE Linux Enterprise Module for Containers 15 | golang-github-docker-libnetwork | 0.7.0.1+gitr2726_872f0a83c98a-4.12.1 |
| SUSE Linux Enterprise Module for Containers 15 | golang-github-docker-libnetwork | 0.7.0.1+gitr2800_fc5a7d91d54c-4.15.1 |
| SUSE Linux Enterprise Module for Containers 15 | golang-github-docker-libnetwork | 0.7.0.1+gitr2711_2cfbf9b1f981-4.9.1 |
| SUSE Linux Enterprise Module for Containers 15 SP1 | containerd | 1.2.6-5.16.1 |
| SUSE Linux Enterprise Module for Containers 15 SP1 | containerd | 1.2.5-5.13.1 |
| SUSE Linux Enterprise Module for Containers 15 SP1 | docker | 19.03.1_ce-6.26.2 |
| SUSE Linux Enterprise Module for Containers 15 SP1 | docker | 18.09.6_ce-6.17.1 |
| SUSE Linux Enterprise Module for Containers 15 SP1 | docker-runc | 1.0.0rc8+gitr3826_425e105d5a03-6.21.2 |
| SUSE Linux Enterprise Module for Containers 15 SP1 | docker-runc | 1.0.0rc6+gitr3804_2b18fe1d885e-6.18.1 |
| SUSE Linux Enterprise Module for Containers 15 SP1 | golang-github-docker-libnetwork | 0.7.0.1+gitr2726_872f0a83c98a-4.12.1 |
| SUSE Linux Enterprise Module for Containers 15 SP1 | golang-github-docker-libnetwork | 0.7.0.1+gitr2800_fc5a7d91d54c-4.15.1 |
| SUSE OpenStack Cloud 6-LTSS | containerd | 1.2.6-16.23.1 |
| SUSE OpenStack Cloud 6-LTSS | containerd | 1.2.2-16.14.2 |
| SUSE OpenStack Cloud 6-LTSS | docker | 19.03.1_ce-98.46.1 |
| SUSE OpenStack Cloud 6-LTSS | docker | 18.09.1_ce-98.34.2 |
| SUSE OpenStack Cloud 6-LTSS | docker-runc | 1.0.0rc8+gitr3826_425e105d5a03-1.29.1 |
| SUSE OpenStack Cloud 6-LTSS | docker-runc | 1.0.0rc5+gitr3562_69663f0bd4b6-1.9.1 |
| SUSE OpenStack Cloud 6-LTSS | docker-runc | 1.0.0rc6+gitr3748_96ec2177ae84-1.17.2 |
| SUSE OpenStack Cloud 6-LTSS | golang-github-docker-libnetwork | 0.7.0.1+gitr2800_fc5a7d91d54c-25.1 |
| SUSE OpenStack Cloud 6-LTSS | golang-github-docker-libnetwork | 0.7.0.1+gitr2711_2cfbf9b1f981-16.2 |
| SUSE Package Hub 15 | go | 1.12-bp150.2.6.1 |
| SUSE Package Hub 15 | lxc | 3.1.0-bp150.5.3.1 |
| SUSE Package Hub 15 | lxcfs | 3.0.3-bp150.3.3.1 |
| SUSE Package Hub 15 | runc | 1.0.0~rc6-bp150.2.3.1 |
| SUSE Package Hub 15 SP1 | lxc | 3.2.1-bp151.5.3.1 |
| Ubuntu 16.04 LTS | docker.io | 18.06.1-0ubuntu1.2~16.04.1 |
| Ubuntu 16.04 LTS | docker.io | 18.09.7-0ubuntu1~16.04.4 |
| Ubuntu 16.04 LTS | runc | 1.0.0~rc2+docker1.13.1-0ubuntu1~16.04.1 |
| Ubuntu 18.04 LTS | docker.io | 18.09.7-0ubuntu1~18.04.3 |
| Ubuntu 18.04 LTS | docker.io | 18.06.1-0ubuntu1.2~18.04.1 |
| Ubuntu 18.04 LTS | runc | 1.0.0~rc4+dfsg1-6ubuntu0.18.04.1 |
| Wolfi | py3-docker | 0 |
| Wolfi | py3.10-docker | 0 |
| Wolfi | py3.11-docker | 0 |
| Wolfi | py3.12-docker | 0 |
| Wolfi | py3.13-docker | 0 |
| openSUSE Leap 15.0 | containerd | 1.2.6-lp151.2.6.1 |
| openSUSE Leap 15.0 | containerd | 1.2.5-lp150.4.14.3 |
| openSUSE Leap 15.0 | docker | 19.03.1_ce-lp151.2.12.1 |
| openSUSE Leap 15.0 | docker | 18.09.6_ce-lp150.5.17.2 |
| openSUSE Leap 15.0 | docker-runc | 1.0.0rc6+gitr3804_2b18fe1d885e-lp150.5.21.2 |
| openSUSE Leap 15.0 | docker-runc | 1.0.0rc8+gitr3826_425e105d5a03-lp151.3.6.1 |
| openSUSE Leap 15.0 | go | 1.12-lp150.2.11.1 |
| openSUSE Leap 15.0 | go1.11 | 1.11.9-lp150.9.3 |
| openSUSE Leap 15.0 | go1.12 | 1.12.4-lp150.2.2 |
| openSUSE Leap 15.0 | golang-github-docker-libnetwork | 0.7.0.1+gitr2800_fc5a7d91d54c-lp151.2.6.1 |
| openSUSE Leap 15.0 | golang-github-docker-libnetwork | 0.7.0.1+gitr2726_872f0a83c98a-lp150.3.14.1 |
| openSUSE Leap 15.0 | lxc | 3.1.0-lp150.2.10.1 |
| openSUSE Leap 15.0 | lxcfs | 3.0.3-lp150.2.3.1 |
| openSUSE Leap 15.1 | containerd | 1.2.5-lp151.2.3.1 |
| openSUSE Leap 15.1 | containerd | 1.2.6-lp151.2.6.1 |
| openSUSE Leap 15.1 | docker | 18.09.6_ce-lp151.2.3.1 |
| openSUSE Leap 15.1 | docker | 19.03.1_ce-lp151.2.12.1 |
| openSUSE Leap 15.1 | docker-runc | 1.0.0rc8+gitr3826_425e105d5a03-lp151.3.6.1 |
| openSUSE Leap 15.1 | docker-runc | 1.0.0rc6+gitr3804_2b18fe1d885e-lp151.3.3.1 |
| openSUSE Leap 15.1 | go | 1.12-lp151.2.3.1 |
| openSUSE Leap 15.1 | go1.11 | 1.11.9-lp151.2.3.1 |
| openSUSE Leap 15.1 | go1.12 | 1.12.4-lp151.2.3.1 |
| openSUSE Leap 15.1 | golang-github-docker-libnetwork | 0.7.0.1+gitr2726_872f0a83c98a-lp151.2.3.1 |
| openSUSE Leap 15.1 | golang-github-docker-libnetwork | 0.7.0.1+gitr2800_fc5a7d91d54c-lp151.2.6.1 |
| openSUSE Leap 15.1 | lxc | 3.2.1-lp151.4.5.1 |
| openSUSE Tumbleweed | containerd | 1.4.8-2.2 |
| openSUSE Tumbleweed | flatpak | 1.11.3-1.2 |
| openSUSE Tumbleweed | lxc | 4.0.9-1.1 |
| openSUSE Tumbleweed | runc | 1.0.2-1.2 |