NVD Vulnerability Detail

CVE-2019-5736

Summary	runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to /proc/self/exe.
Publication Date	Feb. 12, 2019, 4:29 a.m.
Registration Date	Jan. 26, 2021, 11:43 a.m.
Last Update	Nov. 21, 2024, 1:45 p.m.

CVSS3.1 : HIGH
スコア	8.6
Vector	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
攻撃元区分(AV)	ローカル
攻撃条件の複雑さ(AC)	低
攻撃に必要な特権レベル(PR)	不要
利用者の関与(UI)	要
影響の想定範囲(S)	変更あり
機密性への影響(C)	高
完全性への影響(I)	高
可用性への影響(A)	高

CVSS2.0 : HIGH
Score	9.3
Vector	AV:N/AC:M/Au:N/C:C/I:C/A:C
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	中
攻撃前の認証要否(Au)	不要
機密性への影響(C)	高
完全性への影響(I)	高
可用性への影響(A)	高
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	はい

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:docker:docker::::::::					18.09.2

Configuration2	or higher	or less	more than	less than
cpe:2.3:a:linuxfoundation:runc:1.0.0:rc6::::::
cpe:2.3:a:linuxfoundation:runc:1.0.0:rc5::::::
cpe:2.3:a:linuxfoundation:runc:1.0.0:rc4::::::
cpe:2.3:a:linuxfoundation:runc:1.0.0:rc3::::::
cpe:2.3:a:linuxfoundation:runc:1.0.0:rc2::::::
cpe:2.3:a:linuxfoundation:runc:1.0.0:rc1::::::
cpe:2.3:a:linuxfoundation:runc::::::::		0.1.1

Configuration3	or higher	or less	more than	less than
cpe:2.3:o:redhat:enterprise_linux_server:7.0:::::::*
cpe:2.3:a:redhat:openshift:3.4:::::::*
cpe:2.3:a:redhat:openshift:3.7:::::::*
cpe:2.3:a:redhat:openshift:3.6:::::::*
cpe:2.3:a:redhat:openshift:3.5:::::::*
cpe:2.3:o:redhat:enterprise_linux:8.0:::::::*
cpe:2.3:a:redhat:container_development_kit:3.7:::::::*

Configuration4		or higher	or less	more than	less than
cpe:2.3:a:google:kubernetes_engine:-:::::::*

Configuration5		or higher	or less	more than	less than
cpe:2.3:a:linuxcontainers:lxc::::::::					3.2.0

Configuration6		or higher	or less	more than	less than
cpe:2.3:a:hp:onesphere:-:::::::*

Configuration7	or higher	or less	more than	less than
cpe:2.3:a:netapp:solidfire:-:::::::*
cpe:2.3:a:netapp:hci_management_node:-:::::::*

Configuration8	or higher	or less	more than	less than
cpe:2.3:a:apache:mesos::::::::	1.4.0			1.4.3
cpe:2.3:a:apache:mesos::::::::	1.6.0			1.6.2
cpe:2.3:a:apache:mesos::::::::	1.7.0			1.7.2
cpe:2.3:a:apache:mesos::::::::	1.5.0			1.5.3

Configuration9	or higher	or less	more than	less than
cpe:2.3:o:opensuse:leap:42.3:::::::*
cpe:2.3:o:opensuse:leap:15.0:::::::*
cpe:2.3:o:opensuse:leap:15.1:::::::*
cpe:2.3:a:opensuse:backports_sle:15.0:sp1::::::
cpe:2.3:a:opensuse:backports_sle:15.0:-::::::

Configuration10	or higher	or less	more than	less than
cpe:2.3:a:d2iq:kubernetes_engine::::::::				2.2.0-1.13.3
cpe:2.3:o:d2iq:dc\/os::::::::				1.10.10
cpe:2.3:o:d2iq:dc\/os::::::::	1.10.11			1.11.9
cpe:2.3:o:d2iq:dc\/os::::::::	1.11.10			1.12.1

Configuration11	or higher	or less	more than	less than
cpe:2.3:o:fedoraproject:fedora:29:::::::*
cpe:2.3:o:fedoraproject:fedora:30:::::::*

Configuration12	or higher	or less	more than	less than
cpe:2.3:o:canonical:ubuntu_linux:16.04::::lts:::
cpe:2.3:o:canonical:ubuntu_linux:18.04::::lts:::
cpe:2.3:o:canonical:ubuntu_linux:18.10:::::::*
cpe:2.3:o:canonical:ubuntu_linux:19.04:::::::*

Configuration13	or higher	or less	more than	less than
cpe:2.3:a:microfocus:service_management_automation:2018.05:::::::*
cpe:2.3:a:microfocus:service_management_automation:2018.02:::::::*
cpe:2.3:a:microfocus:service_management_automation:2018.08:::::::*
cpe:2.3:a:microfocus:service_management_automation:2018.11:::::::*

Related information, measures and tools

No	URL	タグ
1	http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00044.html	Mailing List Third Party Advisory
2	http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00044.html	Mailing List Third Party Advisory
3	http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00074.html	Mailing List Third Party Advisory
4	http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00074.html	Mailing List Third Party Advisory
5	http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00091.html	Mailing List Third Party Advisory
6	http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00091.html	Mailing List Third Party Advisory
7	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00060.html	Mailing List Third Party Advisory
8	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00060.html	Mailing List Third Party Advisory
9	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00073.html	Mailing List Third Party Advisory
10	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00073.html	Mailing List Third Party Advisory
11	http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00011.html	Mailing List Third Party Advisory
12	http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00011.html	Mailing List Third Party Advisory
13	http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00015.html	Mailing List Third Party Advisory
14	http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00015.html	Mailing List Third Party Advisory
15	http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00084.html	Mailing List Third Party Advisory
16	http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00084.html	Mailing List Third Party Advisory
17	http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00007.html	Mailing List Third Party Advisory
18	http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00007.html	Mailing List Third Party Advisory
19	http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00029.html	Mailing List Third Party Advisory
20	http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00029.html	Mailing List Third Party Advisory
21	http://packetstormsecurity.com/files/163339/Docker-Container-Escape.html	Exploit Third Party Advisory VDB Entry
22	http://packetstormsecurity.com/files/163339/Docker-Container-Escape.html	Exploit Third Party Advisory VDB Entry
23	http://packetstormsecurity.com/files/165197/Docker-runc-Command-Execution-Proof-Of-Concept.html	Third Party Advisory VDB Entry
24	http://packetstormsecurity.com/files/165197/Docker-runc-Command-Execution-Proof-Of-Concept.html	Third Party Advisory VDB Entry
25	http://www.openwall.com/lists/oss-security/2019/03/23/1	Mailing List Third Party Advisory
26	http://www.openwall.com/lists/oss-security/2019/03/23/1	Mailing List Third Party Advisory
27	http://www.openwall.com/lists/oss-security/2019/06/28/2	Mailing List Third Party Advisory
28	http://www.openwall.com/lists/oss-security/2019/06/28/2	Mailing List Third Party Advisory
29	http://www.openwall.com/lists/oss-security/2019/07/06/3	Mailing List Third Party Advisory
30	http://www.openwall.com/lists/oss-security/2019/07/06/3	Mailing List Third Party Advisory
31	http://www.openwall.com/lists/oss-security/2019/07/06/4	Mailing List Third Party Advisory
32	http://www.openwall.com/lists/oss-security/2019/07/06/4	Mailing List Third Party Advisory
33	http://www.openwall.com/lists/oss-security/2019/10/24/1	Mailing List Third Party Advisory
34	http://www.openwall.com/lists/oss-security/2019/10/24/1	Mailing List Third Party Advisory
35	http://www.openwall.com/lists/oss-security/2019/10/29/3	Mailing List Third Party Advisory
36	http://www.openwall.com/lists/oss-security/2019/10/29/3	Mailing List Third Party Advisory
37	http://www.openwall.com/lists/oss-security/2024/01/31/6
38	http://www.openwall.com/lists/oss-security/2024/01/31/6
39	http://www.openwall.com/lists/oss-security/2024/02/01/1
40	http://www.openwall.com/lists/oss-security/2024/02/01/1
41	http://www.openwall.com/lists/oss-security/2024/02/02/3
42	http://www.openwall.com/lists/oss-security/2024/02/02/3
43	http://www.securityfocus.com/bid/106976	Third Party Advisory VDB Entry
44	http://www.securityfocus.com/bid/106976	Third Party Advisory VDB Entry
45	https://access.redhat.com/errata/RHSA-2019:0303	Third Party Advisory
46	https://access.redhat.com/errata/RHSA-2019:0303	Third Party Advisory
47	https://access.redhat.com/errata/RHSA-2019:0304	Third Party Advisory
48	https://access.redhat.com/errata/RHSA-2019:0304	Third Party Advisory
49	https://access.redhat.com/errata/RHSA-2019:0401	Third Party Advisory
50	https://access.redhat.com/errata/RHSA-2019:0401	Third Party Advisory
51	https://access.redhat.com/errata/RHSA-2019:0408	Third Party Advisory
52	https://access.redhat.com/errata/RHSA-2019:0408	Third Party Advisory
53	https://access.redhat.com/errata/RHSA-2019:0975	Third Party Advisory
54	https://access.redhat.com/errata/RHSA-2019:0975	Third Party Advisory
55	https://access.redhat.com/security/cve/cve-2019-5736	Third Party Advisory
56	https://access.redhat.com/security/cve/cve-2019-5736	Third Party Advisory
57	https://access.redhat.com/security/vulnerabilities/runcescape	Third Party Advisory
58	https://access.redhat.com/security/vulnerabilities/runcescape	Third Party Advisory
59	https://aws.amazon.com/security/security-bulletins/AWS-2019-002/	Third Party Advisory
60	https://aws.amazon.com/security/security-bulletins/AWS-2019-002/	Third Party Advisory
61	https://azure.microsoft.com/en-us/updates/cve-2019-5736-and-runc-vulnerability/	Patch Third Party Advisory Vendor Advisory
62	https://azure.microsoft.com/en-us/updates/cve-2019-5736-and-runc-vulnerability/	Patch Third Party Advisory Vendor Advisory
63	https://azure.microsoft.com/en-us/updates/iot-edge-fix-cve-2019-5736/	Patch Third Party Advisory Vendor Advisory
64	https://azure.microsoft.com/en-us/updates/iot-edge-fix-cve-2019-5736/	Patch Third Party Advisory Vendor Advisory
65	https://blog.dragonsector.pl/2019/02/cve-2019-5736-escape-from-docker-and.html	Exploit Mitigation Third Party Advisory
66	https://blog.dragonsector.pl/2019/02/cve-2019-5736-escape-from-docker-and.html	Exploit Mitigation Third Party Advisory
67	https://brauner.github.io/2019/02/12/privileged-containers.html	Exploit Technical Description Third Party Advisory
68	https://brauner.github.io/2019/02/12/privileged-containers.html	Exploit Technical Description Third Party Advisory
69	https://bugzilla.suse.com/show_bug.cgi?id=1121967	Issue Tracking Patch Third Party Advisory
70	https://bugzilla.suse.com/show_bug.cgi?id=1121967	Issue Tracking Patch Third Party Advisory
71	https://cloud.google.com/kubernetes-engine/docs/security-bulletins#february-11-2019-runc	Third Party Advisory
72	https://cloud.google.com/kubernetes-engine/docs/security-bulletins#february-11-2019-runc	Third Party Advisory
73	https://github.com/docker/docker-ce/releases/tag/v18.09.2	Release Notes Third Party Advisory
74	https://github.com/docker/docker-ce/releases/tag/v18.09.2	Release Notes Third Party Advisory
75	https://github.com/Frichetten/CVE-2019-5736-PoC	Exploit Third Party Advisory
76	https://github.com/Frichetten/CVE-2019-5736-PoC	Exploit Third Party Advisory
77	https://github.com/opencontainers/runc/commit/0a8e4117e7f715d5fbeef398405813ce8e88558b	Patch Third Party Advisory
78	https://github.com/opencontainers/runc/commit/0a8e4117e7f715d5fbeef398405813ce8e88558b	Patch Third Party Advisory
79	https://github.com/opencontainers/runc/commit/6635b4f0c6af3810594d2770f662f34ddc15b40d	Patch Third Party Advisory
80	https://github.com/opencontainers/runc/commit/6635b4f0c6af3810594d2770f662f34ddc15b40d	Patch Third Party Advisory
81	https://github.com/q3k/cve-2019-5736-poc	Exploit Third Party Advisory
82	https://github.com/q3k/cve-2019-5736-poc	Exploit Third Party Advisory
83	https://github.com/rancher/runc-cve	Third Party Advisory
84	https://github.com/rancher/runc-cve	Third Party Advisory
85	https://kubernetes.io/blog/2019/02/11/runc-and-cve-2019-5736/	Third Party Advisory
86	https://kubernetes.io/blog/2019/02/11/runc-and-cve-2019-5736/	Third Party Advisory
87	https://lists.apache.org/thread.html/24e54e3c6b2259e3903b6b8fe26896ac649c481ea99c5739468c92a3%40%3Cdev.dlab.apache.org%3E
88	https://lists.apache.org/thread.html/24e54e3c6b2259e3903b6b8fe26896ac649c481ea99c5739468c92a3%40%3Cdev.dlab.apache.org%3E
89	https://lists.apache.org/thread.html/a258757af84c5074dc7bf932622020fd4f60cef65a84290380386706%40%3Cuser.mesos.apache.org%3E
90	https://lists.apache.org/thread.html/a258757af84c5074dc7bf932622020fd4f60cef65a84290380386706%40%3Cuser.mesos.apache.org%3E
91	https://lists.apache.org/thread.html/a585f64d14c31ab393b90c5f17e41d9765a1a17eec63856ce750af46%40%3Cdev.dlab.apache.org%3E
92	https://lists.apache.org/thread.html/a585f64d14c31ab393b90c5f17e41d9765a1a17eec63856ce750af46%40%3Cdev.dlab.apache.org%3E
93	https://lists.apache.org/thread.html/acacf018c12636e41667e94ac0a1e9244e887eef2debdd474640aa6e%40%3Cdev.dlab.apache.org%3E
94	https://lists.apache.org/thread.html/acacf018c12636e41667e94ac0a1e9244e887eef2debdd474640aa6e%40%3Cdev.dlab.apache.org%3E
95	https://lists.apache.org/thread.html/b162dd624dc088cd634292f0402282a1d1d0ce853baeae8205bc033c%40%3Cdev.mesos.apache.org%3E
96	https://lists.apache.org/thread.html/b162dd624dc088cd634292f0402282a1d1d0ce853baeae8205bc033c%40%3Cdev.mesos.apache.org%3E
97	https://lists.apache.org/thread.html/rc494623986d76593873ce5a40dd69cb3629400d10750d5d7e96b8587%40%3Cdev.dlab.apache.org%3E
98	https://lists.apache.org/thread.html/rc494623986d76593873ce5a40dd69cb3629400d10750d5d7e96b8587%40%3Cdev.dlab.apache.org%3E
99	https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E
100	https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E
101	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DLC52IOJN6IQJWJ6CUI6AIUP6GVVG2QP/
102	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DLC52IOJN6IQJWJ6CUI6AIUP6GVVG2QP/
103	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EGZKRCKI3Y7FMADO2MENMT4TU24QGHFR/
104	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EGZKRCKI3Y7FMADO2MENMT4TU24QGHFR/
105	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWFJGIPYAAAMVSWWI3QWYXGA3ZBU2H4W/
106	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWFJGIPYAAAMVSWWI3QWYXGA3ZBU2H4W/
107	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6A4OSFM5GGOWW4ECELV5OHX2XRAUSPH/
108	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6A4OSFM5GGOWW4ECELV5OHX2XRAUSPH/
109	https://security.gentoo.org/glsa/202003-21	Third Party Advisory
110	https://security.gentoo.org/glsa/202003-21	Third Party Advisory
111	https://security.netapp.com/advisory/ntap-20190307-0008/	Third Party Advisory
112	https://security.netapp.com/advisory/ntap-20190307-0008/	Third Party Advisory
113	https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03410944	Third Party Advisory
114	https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03410944	Third Party Advisory
115	https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03913en_us	Permissions Required
116	https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03913en_us	Permissions Required
117	https://support.mesosphere.com/s/article/Known-Issue-Container-Runtime-Vulnerability-MSPH-2019-0003	Exploit Patch Third Party Advisory
118	https://support.mesosphere.com/s/article/Known-Issue-Container-Runtime-Vulnerability-MSPH-2019-0003	Exploit Patch Third Party Advisory
119	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190215-runc	Third Party Advisory
120	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190215-runc	Third Party Advisory
121	https://usn.ubuntu.com/4048-1/	Third Party Advisory
122	https://usn.ubuntu.com/4048-1/	Third Party Advisory
123	https://www.exploit-db.com/exploits/46359/	Exploit Third Party Advisory VDB Entry
124	https://www.exploit-db.com/exploits/46359/	Exploit Third Party Advisory VDB Entry
125	https://www.exploit-db.com/exploits/46369/	Exploit Third Party Advisory VDB Entry
126	https://www.exploit-db.com/exploits/46369/	Exploit Third Party Advisory VDB Entry
127	https://www.openwall.com/lists/oss-security/2019/02/11/2	Mailing List Patch Third Party Advisory
128	https://www.openwall.com/lists/oss-security/2019/02/11/2	Mailing List Patch Third Party Advisory
129	https://www.synology.com/security/advisory/Synology_SA_19_06	Third Party Advisory
130	https://www.synology.com/security/advisory/Synology_SA_19_06	Third Party Advisory
131	https://www.twistlock.com/2019/02/11/how-to-mitigate-cve-2019-5736-in-runc-and-docker/	Third Party Advisory
132	https://www.twistlock.com/2019/02/11/how-to-mitigate-cve-2019-5736-in-runc-and-docker/	Third Party Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-78	OSコマンド・インジェクション	https://cwe.mitre.org/data/definitions/78.html

JVN Vulnerability Information

Docker および runc におけるコンテナエラーの脆弱性

Title	Docker および runc におけるコンテナエラーの脆弱性
Summary	Docker および runc には、コンテナエラーの脆弱性が存在します。
Possible impacts	情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダ情報および参考情報を参照して適切な対策を実施してください。
Publication Date	Feb. 11, 2019, midnight
Registration Date	March 27, 2019, 2:53 p.m.
Last Update	March 27, 2019, 2:53 p.m.

Affected System

レッドハット

Red Hat Enterprise Linux

Red Hat Enterprise Linux Server

Red Hat OpenShift

Google

Kubernetes Engine

Linux Containers

LXC

Docker

Docker 18.09.2 未満

ヒューレット・パッカード・エンタープライズ

HPE OneSphere

Open Container Project

runC 1.0-rc6 まで

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2019-5736	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5736
2	CVE-2019-5736	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5736
National Vulnerability Database (NVD)
3	CVE-2019-5736	https://nvd.nist.gov/vuln/detail/CVE-2019-5736
4	CVE-2019-5736	https://nvd.nist.gov/vuln/detail/CVE-2019-5736
Red Hat CVE Database
5	CVE-2019-5736	https://access.redhat.com/security/cve/cve-2019-5736
6	CVE-2019-5736	https://access.redhat.com/security/cve/cve-2019-5736
関連文書
7	CVE-2019-5736: runc container breakout (all versions)	https://www.openwall.com/lists/oss-security/2019/02/11/2
8	CVE-2019-5736: runc container breakout (all versions)	https://www.openwall.com/lists/oss-security/2019/02/11/2

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-216	http://cwe.mitre.org/data/definitions/216.html
2	CWE-216	http://cwe.mitre.org/data/definitions/216.html

ベンダー情報

No	Name	URL
GitHub
1	18.09.2	https://github.com/docker/docker-ce/releases/tag/v18.09.2
2	18.09.2	https://github.com/docker/docker-ce/releases/tag/v18.09.2
3	merge branch 'cve-2019-5736'	https://github.com/opencontainers/runc/commit/6635b4f0c6af3810594d2770f662f34ddc15b40d
4	merge branch 'cve-2019-5736'	https://github.com/opencontainers/runc/commit/6635b4f0c6af3810594d2770f662f34ddc15b40d
5	nsenter: clone /proc/self/exe to avoid exposing host binary to container	https://github.com/opencontainers/runc/commit/0a8e4117e7f715d5fbeef398405813ce8e88558b
6	nsenter: clone /proc/self/exe to avoid exposing host binary to container	https://github.com/opencontainers/runc/commit/0a8e4117e7f715d5fbeef398405813ce8e88558b
Google
7	2019 年 2 月 11 日（runc）	https://cloud.google.com/kubernetes-engine/docs/security-bulletins#february-11-2019-runc
8	2019 年 2 月 11 日（runc）	https://cloud.google.com/kubernetes-engine/docs/security-bulletins#february-11-2019-runc
HPE Security Bulletin
9	hpesbhf03913en_us	https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03913en_us
10	hpesbhf03913en_us	https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03913en_us
Linux Containers
11	Top Page	https://linuxcontainers.org/
12	Top Page	https://linuxcontainers.org/
Red Hat Security Advisory
13	RHSA-2019:0303	https://access.redhat.com/errata/RHSA-2019:0303
14	RHSA-2019:0303	https://access.redhat.com/errata/RHSA-2019:0303
15	RHSA-2019:0304	https://access.redhat.com/errata/RHSA-2019:0304
16	RHSA-2019:0304	https://access.redhat.com/errata/RHSA-2019:0304
17	RHSA-2019:0401	https://access.redhat.com/errata/RHSA-2019:0401
18	RHSA-2019:0401	https://access.redhat.com/errata/RHSA-2019:0401
19	RHSA-2019:0408	https://access.redhat.com/errata/RHSA-2019:0408
20	RHSA-2019:0408	https://access.redhat.com/errata/RHSA-2019:0408

Change Log

No	Changed Details	Date of change
1	[2019年03月27日] 掲載	March 27, 2019, 2:53 p.m.

Configuration2	or higher	or less	more than	less than
cpe:2.3:a:linuxfoundation:runc:1.0.0:rc6::::::
cpe:2.3:a:linuxfoundation:runc:1.0.0:rc5::::::
cpe:2.3:a:linuxfoundation:runc:1.0.0:rc4::::::
cpe:2.3:a:linuxfoundation:runc:1.0.0:rc3::::::
cpe:2.3:a:linuxfoundation:runc:1.0.0:rc2::::::
cpe:2.3:a:linuxfoundation:runc:1.0.0:rc1::::::
cpe:2.3:a:linuxfoundation:runc::::::::		0.1.1

Configuration3	or higher	or less	more than	less than
cpe:2.3:o:redhat:enterprise_linux_server:7.0:::::::*
cpe:2.3:a:redhat:openshift:3.4:::::::*
cpe:2.3:a:redhat:openshift:3.7:::::::*
cpe:2.3:a:redhat:openshift:3.6:::::::*
cpe:2.3:a:redhat:openshift:3.5:::::::*
cpe:2.3:o:redhat:enterprise_linux:8.0:::::::*
cpe:2.3:a:redhat:container_development_kit:3.7:::::::*