NVD脆弱性詳細

CVE-2019-5736

概要	runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to /proc/self/exe.
公表日	2019年2月12日4:29
登録日	2021年1月26日11:43
最終更新日	2024年11月21日13:45

CVSS3.1 : HIGH
スコア	8.6
ベクター	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
攻撃元区分(AV)	ローカル
攻撃条件の複雑さ(AC)	低
攻撃に必要な特権レベル(PR)	不要
利用者の関与(UI)	要
影響の想定範囲(S)	変更あり
機密性への影響(C)	高
完全性への影響(I)	高
可用性への影響(A)	高

CVSS2.0 : HIGH
スコア	9.3
ベクター	AV:N/AC:M/Au:N/C:C/I:C/A:C
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	中
攻撃前の認証要否(Au)	不要
機密性への影響(C)	高
完全性への影響(I)	高
可用性への影響(A)	高
全ての特権を取得	いいえ
ユーザー権限を取得	いいえ
その他の権限を取得	いいえ
ユーザー操作が必要	はい

影響を受けるソフトウェアの構成

構成1		以上	以下	より上	未満
cpe:2.3:a:docker:docker::::::::					18.09.2

構成2	以上	以下	より上	未満
cpe:2.3:a:linuxfoundation:runc:1.0.0:rc6::::::
cpe:2.3:a:linuxfoundation:runc:1.0.0:rc5::::::
cpe:2.3:a:linuxfoundation:runc:1.0.0:rc4::::::
cpe:2.3:a:linuxfoundation:runc:1.0.0:rc3::::::
cpe:2.3:a:linuxfoundation:runc:1.0.0:rc2::::::
cpe:2.3:a:linuxfoundation:runc:1.0.0:rc1::::::
cpe:2.3:a:linuxfoundation:runc::::::::		0.1.1

構成3	以上	以下	より上	未満
cpe:2.3:o:redhat:enterprise_linux_server:7.0:::::::*
cpe:2.3:a:redhat:openshift:3.4:::::::*
cpe:2.3:a:redhat:openshift:3.7:::::::*
cpe:2.3:a:redhat:openshift:3.6:::::::*
cpe:2.3:a:redhat:openshift:3.5:::::::*
cpe:2.3:o:redhat:enterprise_linux:8.0:::::::*
cpe:2.3:a:redhat:container_development_kit:3.7:::::::*

構成4		以上	以下	より上	未満
cpe:2.3:a:google:kubernetes_engine:-:::::::*

構成5		以上	以下	より上	未満
cpe:2.3:a:linuxcontainers:lxc::::::::					3.2.0

構成6		以上	以下	より上	未満
cpe:2.3:a:hp:onesphere:-:::::::*

構成7	以上	以下	より上	未満
cpe:2.3:a:netapp:solidfire:-:::::::*
cpe:2.3:a:netapp:hci_management_node:-:::::::*

構成8	以上	以下	より上	未満
cpe:2.3:a:apache:mesos::::::::	1.4.0			1.4.3
cpe:2.3:a:apache:mesos::::::::	1.6.0			1.6.2
cpe:2.3:a:apache:mesos::::::::	1.7.0			1.7.2
cpe:2.3:a:apache:mesos::::::::	1.5.0			1.5.3

構成9	以上	以下	より上	未満
cpe:2.3:o:opensuse:leap:42.3:::::::*
cpe:2.3:o:opensuse:leap:15.0:::::::*
cpe:2.3:o:opensuse:leap:15.1:::::::*
cpe:2.3:a:opensuse:backports_sle:15.0:sp1::::::
cpe:2.3:a:opensuse:backports_sle:15.0:-::::::

構成10	以上	以下	より上	未満
cpe:2.3:a:d2iq:kubernetes_engine::::::::				2.2.0-1.13.3
cpe:2.3:o:d2iq:dc\/os::::::::				1.10.10
cpe:2.3:o:d2iq:dc\/os::::::::	1.10.11			1.11.9
cpe:2.3:o:d2iq:dc\/os::::::::	1.11.10			1.12.1

構成11	以上	以下	より上	未満
cpe:2.3:o:fedoraproject:fedora:29:::::::*
cpe:2.3:o:fedoraproject:fedora:30:::::::*

構成12	以上	以下	より上	未満
cpe:2.3:o:canonical:ubuntu_linux:16.04::::lts:::
cpe:2.3:o:canonical:ubuntu_linux:18.04::::lts:::
cpe:2.3:o:canonical:ubuntu_linux:18.10:::::::*
cpe:2.3:o:canonical:ubuntu_linux:19.04:::::::*

構成13	以上	以下	より上	未満
cpe:2.3:a:microfocus:service_management_automation:2018.05:::::::*
cpe:2.3:a:microfocus:service_management_automation:2018.02:::::::*
cpe:2.3:a:microfocus:service_management_automation:2018.08:::::::*
cpe:2.3:a:microfocus:service_management_automation:2018.11:::::::*

関連情報、対策とツール

No	URL	タグ
1	http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00044.html	Mailing List Third Party Advisory
2	http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00044.html	Mailing List Third Party Advisory
3	http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00074.html	Mailing List Third Party Advisory
4	http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00074.html	Mailing List Third Party Advisory
5	http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00091.html	Mailing List Third Party Advisory
6	http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00091.html	Mailing List Third Party Advisory
7	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00060.html	Mailing List Third Party Advisory
8	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00060.html	Mailing List Third Party Advisory
9	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00073.html	Mailing List Third Party Advisory
10	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00073.html	Mailing List Third Party Advisory
11	http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00011.html	Mailing List Third Party Advisory
12	http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00011.html	Mailing List Third Party Advisory
13	http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00015.html	Mailing List Third Party Advisory
14	http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00015.html	Mailing List Third Party Advisory
15	http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00084.html	Mailing List Third Party Advisory
16	http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00084.html	Mailing List Third Party Advisory
17	http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00007.html	Mailing List Third Party Advisory
18	http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00007.html	Mailing List Third Party Advisory
19	http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00029.html	Mailing List Third Party Advisory
20	http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00029.html	Mailing List Third Party Advisory
21	http://packetstormsecurity.com/files/163339/Docker-Container-Escape.html	Exploit Third Party Advisory VDB Entry
22	http://packetstormsecurity.com/files/163339/Docker-Container-Escape.html	Exploit Third Party Advisory VDB Entry
23	http://packetstormsecurity.com/files/165197/Docker-runc-Command-Execution-Proof-Of-Concept.html	Third Party Advisory VDB Entry
24	http://packetstormsecurity.com/files/165197/Docker-runc-Command-Execution-Proof-Of-Concept.html	Third Party Advisory VDB Entry
25	http://www.openwall.com/lists/oss-security/2019/03/23/1	Mailing List Third Party Advisory
26	http://www.openwall.com/lists/oss-security/2019/03/23/1	Mailing List Third Party Advisory
27	http://www.openwall.com/lists/oss-security/2019/06/28/2	Mailing List Third Party Advisory
28	http://www.openwall.com/lists/oss-security/2019/06/28/2	Mailing List Third Party Advisory
29	http://www.openwall.com/lists/oss-security/2019/07/06/3	Mailing List Third Party Advisory
30	http://www.openwall.com/lists/oss-security/2019/07/06/3	Mailing List Third Party Advisory
31	http://www.openwall.com/lists/oss-security/2019/07/06/4	Mailing List Third Party Advisory
32	http://www.openwall.com/lists/oss-security/2019/07/06/4	Mailing List Third Party Advisory
33	http://www.openwall.com/lists/oss-security/2019/10/24/1	Mailing List Third Party Advisory
34	http://www.openwall.com/lists/oss-security/2019/10/24/1	Mailing List Third Party Advisory
35	http://www.openwall.com/lists/oss-security/2019/10/29/3	Mailing List Third Party Advisory
36	http://www.openwall.com/lists/oss-security/2019/10/29/3	Mailing List Third Party Advisory
37	http://www.openwall.com/lists/oss-security/2024/01/31/6
38	http://www.openwall.com/lists/oss-security/2024/01/31/6
39	http://www.openwall.com/lists/oss-security/2024/02/01/1
40	http://www.openwall.com/lists/oss-security/2024/02/01/1
41	http://www.openwall.com/lists/oss-security/2024/02/02/3
42	http://www.openwall.com/lists/oss-security/2024/02/02/3
43	http://www.securityfocus.com/bid/106976	Third Party Advisory VDB Entry
44	http://www.securityfocus.com/bid/106976	Third Party Advisory VDB Entry
45	https://access.redhat.com/errata/RHSA-2019:0303	Third Party Advisory
46	https://access.redhat.com/errata/RHSA-2019:0303	Third Party Advisory
47	https://access.redhat.com/errata/RHSA-2019:0304	Third Party Advisory
48	https://access.redhat.com/errata/RHSA-2019:0304	Third Party Advisory
49	https://access.redhat.com/errata/RHSA-2019:0401	Third Party Advisory
50	https://access.redhat.com/errata/RHSA-2019:0401	Third Party Advisory
51	https://access.redhat.com/errata/RHSA-2019:0408	Third Party Advisory
52	https://access.redhat.com/errata/RHSA-2019:0408	Third Party Advisory
53	https://access.redhat.com/errata/RHSA-2019:0975	Third Party Advisory
54	https://access.redhat.com/errata/RHSA-2019:0975	Third Party Advisory
55	https://access.redhat.com/security/cve/cve-2019-5736	Third Party Advisory
56	https://access.redhat.com/security/cve/cve-2019-5736	Third Party Advisory
57	https://access.redhat.com/security/vulnerabilities/runcescape	Third Party Advisory
58	https://access.redhat.com/security/vulnerabilities/runcescape	Third Party Advisory
59	https://aws.amazon.com/security/security-bulletins/AWS-2019-002/	Third Party Advisory
60	https://aws.amazon.com/security/security-bulletins/AWS-2019-002/	Third Party Advisory
61	https://azure.microsoft.com/en-us/updates/cve-2019-5736-and-runc-vulnerability/	Patch Third Party Advisory Vendor Advisory
62	https://azure.microsoft.com/en-us/updates/cve-2019-5736-and-runc-vulnerability/	Patch Third Party Advisory Vendor Advisory
63	https://azure.microsoft.com/en-us/updates/iot-edge-fix-cve-2019-5736/	Patch Third Party Advisory Vendor Advisory
64	https://azure.microsoft.com/en-us/updates/iot-edge-fix-cve-2019-5736/	Patch Third Party Advisory Vendor Advisory
65	https://blog.dragonsector.pl/2019/02/cve-2019-5736-escape-from-docker-and.html	Exploit Mitigation Third Party Advisory
66	https://blog.dragonsector.pl/2019/02/cve-2019-5736-escape-from-docker-and.html	Exploit Mitigation Third Party Advisory
67	https://brauner.github.io/2019/02/12/privileged-containers.html	Exploit Technical Description Third Party Advisory
68	https://brauner.github.io/2019/02/12/privileged-containers.html	Exploit Technical Description Third Party Advisory
69	https://bugzilla.suse.com/show_bug.cgi?id=1121967	Issue Tracking Patch Third Party Advisory
70	https://bugzilla.suse.com/show_bug.cgi?id=1121967	Issue Tracking Patch Third Party Advisory
71	https://cloud.google.com/kubernetes-engine/docs/security-bulletins#february-11-2019-runc	Third Party Advisory
72	https://cloud.google.com/kubernetes-engine/docs/security-bulletins#february-11-2019-runc	Third Party Advisory
73	https://github.com/docker/docker-ce/releases/tag/v18.09.2	Release Notes Third Party Advisory
74	https://github.com/docker/docker-ce/releases/tag/v18.09.2	Release Notes Third Party Advisory
75	https://github.com/Frichetten/CVE-2019-5736-PoC	Exploit Third Party Advisory
76	https://github.com/Frichetten/CVE-2019-5736-PoC	Exploit Third Party Advisory
77	https://github.com/opencontainers/runc/commit/0a8e4117e7f715d5fbeef398405813ce8e88558b	Patch Third Party Advisory
78	https://github.com/opencontainers/runc/commit/0a8e4117e7f715d5fbeef398405813ce8e88558b	Patch Third Party Advisory
79	https://github.com/opencontainers/runc/commit/6635b4f0c6af3810594d2770f662f34ddc15b40d	Patch Third Party Advisory
80	https://github.com/opencontainers/runc/commit/6635b4f0c6af3810594d2770f662f34ddc15b40d	Patch Third Party Advisory
81	https://github.com/q3k/cve-2019-5736-poc	Exploit Third Party Advisory
82	https://github.com/q3k/cve-2019-5736-poc	Exploit Third Party Advisory
83	https://github.com/rancher/runc-cve	Third Party Advisory
84	https://github.com/rancher/runc-cve	Third Party Advisory
85	https://kubernetes.io/blog/2019/02/11/runc-and-cve-2019-5736/	Third Party Advisory
86	https://kubernetes.io/blog/2019/02/11/runc-and-cve-2019-5736/	Third Party Advisory
87	https://lists.apache.org/thread.html/24e54e3c6b2259e3903b6b8fe26896ac649c481ea99c5739468c92a3%40%3Cdev.dlab.apache.org%3E
88	https://lists.apache.org/thread.html/24e54e3c6b2259e3903b6b8fe26896ac649c481ea99c5739468c92a3%40%3Cdev.dlab.apache.org%3E
89	https://lists.apache.org/thread.html/a258757af84c5074dc7bf932622020fd4f60cef65a84290380386706%40%3Cuser.mesos.apache.org%3E
90	https://lists.apache.org/thread.html/a258757af84c5074dc7bf932622020fd4f60cef65a84290380386706%40%3Cuser.mesos.apache.org%3E
91	https://lists.apache.org/thread.html/a585f64d14c31ab393b90c5f17e41d9765a1a17eec63856ce750af46%40%3Cdev.dlab.apache.org%3E
92	https://lists.apache.org/thread.html/a585f64d14c31ab393b90c5f17e41d9765a1a17eec63856ce750af46%40%3Cdev.dlab.apache.org%3E
93	https://lists.apache.org/thread.html/acacf018c12636e41667e94ac0a1e9244e887eef2debdd474640aa6e%40%3Cdev.dlab.apache.org%3E
94	https://lists.apache.org/thread.html/acacf018c12636e41667e94ac0a1e9244e887eef2debdd474640aa6e%40%3Cdev.dlab.apache.org%3E
95	https://lists.apache.org/thread.html/b162dd624dc088cd634292f0402282a1d1d0ce853baeae8205bc033c%40%3Cdev.mesos.apache.org%3E
96	https://lists.apache.org/thread.html/b162dd624dc088cd634292f0402282a1d1d0ce853baeae8205bc033c%40%3Cdev.mesos.apache.org%3E
97	https://lists.apache.org/thread.html/rc494623986d76593873ce5a40dd69cb3629400d10750d5d7e96b8587%40%3Cdev.dlab.apache.org%3E
98	https://lists.apache.org/thread.html/rc494623986d76593873ce5a40dd69cb3629400d10750d5d7e96b8587%40%3Cdev.dlab.apache.org%3E
99	https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E
100	https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E
101	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DLC52IOJN6IQJWJ6CUI6AIUP6GVVG2QP/
102	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DLC52IOJN6IQJWJ6CUI6AIUP6GVVG2QP/
103	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EGZKRCKI3Y7FMADO2MENMT4TU24QGHFR/
104	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EGZKRCKI3Y7FMADO2MENMT4TU24QGHFR/
105	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWFJGIPYAAAMVSWWI3QWYXGA3ZBU2H4W/
106	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWFJGIPYAAAMVSWWI3QWYXGA3ZBU2H4W/
107	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6A4OSFM5GGOWW4ECELV5OHX2XRAUSPH/
108	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6A4OSFM5GGOWW4ECELV5OHX2XRAUSPH/
109	https://security.gentoo.org/glsa/202003-21	Third Party Advisory
110	https://security.gentoo.org/glsa/202003-21	Third Party Advisory
111	https://security.netapp.com/advisory/ntap-20190307-0008/	Third Party Advisory
112	https://security.netapp.com/advisory/ntap-20190307-0008/	Third Party Advisory
113	https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03410944	Third Party Advisory
114	https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03410944	Third Party Advisory
115	https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03913en_us	Permissions Required
116	https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03913en_us	Permissions Required
117	https://support.mesosphere.com/s/article/Known-Issue-Container-Runtime-Vulnerability-MSPH-2019-0003	Exploit Patch Third Party Advisory
118	https://support.mesosphere.com/s/article/Known-Issue-Container-Runtime-Vulnerability-MSPH-2019-0003	Exploit Patch Third Party Advisory
119	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190215-runc	Third Party Advisory
120	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190215-runc	Third Party Advisory
121	https://usn.ubuntu.com/4048-1/	Third Party Advisory
122	https://usn.ubuntu.com/4048-1/	Third Party Advisory
123	https://www.exploit-db.com/exploits/46359/	Exploit Third Party Advisory VDB Entry
124	https://www.exploit-db.com/exploits/46359/	Exploit Third Party Advisory VDB Entry
125	https://www.exploit-db.com/exploits/46369/	Exploit Third Party Advisory VDB Entry
126	https://www.exploit-db.com/exploits/46369/	Exploit Third Party Advisory VDB Entry
127	https://www.openwall.com/lists/oss-security/2019/02/11/2	Mailing List Patch Third Party Advisory
128	https://www.openwall.com/lists/oss-security/2019/02/11/2	Mailing List Patch Third Party Advisory
129	https://www.synology.com/security/advisory/Synology_SA_19_06	Third Party Advisory
130	https://www.synology.com/security/advisory/Synology_SA_19_06	Third Party Advisory
131	https://www.twistlock.com/2019/02/11/how-to-mitigate-cve-2019-5736-in-runc-and-docker/	Third Party Advisory
132	https://www.twistlock.com/2019/02/11/how-to-mitigate-cve-2019-5736-in-runc-and-docker/	Third Party Advisory

共通脆弱性一覧

No	CWE	名前	URL
1	CWE-78	OSコマンド・インジェクション	https://cwe.mitre.org/data/definitions/78.html

JVN脆弱性情報

Docker および runc におけるコンテナエラーの脆弱性

タイトル	Docker および runc におけるコンテナエラーの脆弱性
概要	Docker および runc には、コンテナエラーの脆弱性が存在します。
想定される影響	情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。
対策	ベンダ情報および参考情報を参照して適切な対策を実施してください。
公表日	2019年2月11日0:00
登録日	2019年3月27日14:53
最終更新日	2019年3月27日14:53

影響を受けるシステム

レッドハット

Red Hat Enterprise Linux

Red Hat Enterprise Linux Server

Red Hat OpenShift

Google

Kubernetes Engine

Linux Containers

LXC

Docker

Docker 18.09.2 未満

ヒューレット・パッカード・エンタープライズ

HPE OneSphere

Open Container Project

runC 1.0-rc6 まで

CVE (情報セキュリティ共通脆弱性識別子)

No	名前	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2019-5736	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5736
2	CVE-2019-5736	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5736
National Vulnerability Database (NVD)
3	CVE-2019-5736	https://nvd.nist.gov/vuln/detail/CVE-2019-5736
4	CVE-2019-5736	https://nvd.nist.gov/vuln/detail/CVE-2019-5736
Red Hat CVE Database
5	CVE-2019-5736	https://access.redhat.com/security/cve/cve-2019-5736
6	CVE-2019-5736	https://access.redhat.com/security/cve/cve-2019-5736
関連文書
7	CVE-2019-5736: runc container breakout (all versions)	https://www.openwall.com/lists/oss-security/2019/02/11/2
8	CVE-2019-5736: runc container breakout (all versions)	https://www.openwall.com/lists/oss-security/2019/02/11/2

CWE (共通脆弱性タイプ一覧)

No	名前	URL
JVNDB
1	CWE-216	http://cwe.mitre.org/data/definitions/216.html
2	CWE-216	http://cwe.mitre.org/data/definitions/216.html

ベンダー情報

No	名前	URL
GitHub
1	18.09.2	https://github.com/docker/docker-ce/releases/tag/v18.09.2
2	18.09.2	https://github.com/docker/docker-ce/releases/tag/v18.09.2
3	merge branch 'cve-2019-5736'	https://github.com/opencontainers/runc/commit/6635b4f0c6af3810594d2770f662f34ddc15b40d
4	merge branch 'cve-2019-5736'	https://github.com/opencontainers/runc/commit/6635b4f0c6af3810594d2770f662f34ddc15b40d
5	nsenter: clone /proc/self/exe to avoid exposing host binary to container	https://github.com/opencontainers/runc/commit/0a8e4117e7f715d5fbeef398405813ce8e88558b
6	nsenter: clone /proc/self/exe to avoid exposing host binary to container	https://github.com/opencontainers/runc/commit/0a8e4117e7f715d5fbeef398405813ce8e88558b
Google
7	2019 年 2 月 11 日（runc）	https://cloud.google.com/kubernetes-engine/docs/security-bulletins#february-11-2019-runc
8	2019 年 2 月 11 日（runc）	https://cloud.google.com/kubernetes-engine/docs/security-bulletins#february-11-2019-runc
HPE Security Bulletin
9	hpesbhf03913en_us	https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03913en_us
10	hpesbhf03913en_us	https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03913en_us
Linux Containers
11	Top Page	https://linuxcontainers.org/
12	Top Page	https://linuxcontainers.org/
Red Hat Security Advisory
13	RHSA-2019:0303	https://access.redhat.com/errata/RHSA-2019:0303
14	RHSA-2019:0303	https://access.redhat.com/errata/RHSA-2019:0303
15	RHSA-2019:0304	https://access.redhat.com/errata/RHSA-2019:0304
16	RHSA-2019:0304	https://access.redhat.com/errata/RHSA-2019:0304
17	RHSA-2019:0401	https://access.redhat.com/errata/RHSA-2019:0401
18	RHSA-2019:0401	https://access.redhat.com/errata/RHSA-2019:0401
19	RHSA-2019:0408	https://access.redhat.com/errata/RHSA-2019:0408
20	RHSA-2019:0408	https://access.redhat.com/errata/RHSA-2019:0408

変更履歴

No	変更内容	変更日
1	[2019年03月27日] 掲載	2019年3月27日14:53

構成2	以上	以下	より上	未満
cpe:2.3:a:linuxfoundation:runc:1.0.0:rc6::::::
cpe:2.3:a:linuxfoundation:runc:1.0.0:rc5::::::
cpe:2.3:a:linuxfoundation:runc:1.0.0:rc4::::::
cpe:2.3:a:linuxfoundation:runc:1.0.0:rc3::::::
cpe:2.3:a:linuxfoundation:runc:1.0.0:rc2::::::
cpe:2.3:a:linuxfoundation:runc:1.0.0:rc1::::::
cpe:2.3:a:linuxfoundation:runc::::::::		0.1.1

構成3	以上	以下	より上	未満
cpe:2.3:o:redhat:enterprise_linux_server:7.0:::::::*
cpe:2.3:a:redhat:openshift:3.4:::::::*
cpe:2.3:a:redhat:openshift:3.7:::::::*
cpe:2.3:a:redhat:openshift:3.6:::::::*
cpe:2.3:a:redhat:openshift:3.5:::::::*
cpe:2.3:o:redhat:enterprise_linux:8.0:::::::*
cpe:2.3:a:redhat:container_development_kit:3.7:::::::*