CVE-2019-5736
90Vexday Risk Score
Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.
ssvc Actepss 98%
da publicação à arma1 dias
Publicada no NVD11 de fev.
1ª PoC+1d
metasploit1 de jan.
VulnCheck+1291d
probabilidade de exploração
98%top 1% das CVEs
exploração observada
simVulnCheck
50 exploit(s) público(s)
runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to /proc/self/exe.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 50
exploitdbwww.exploit-db.com/exploits/46359não verificadoexploitdbwww.exploit-db.com/exploits/46369não verificadogithubgithub.com/Frichetten/CVE-2019-5736-PoC★ 659githubgithub.com/q3k/cve-2019-5736-poc★ 210githubgithub.com/twistlock/RunC-CVE-2019-5736★ 86githubgithub.com/jas502n/CVE-2019-5736★ 14githubgithub.com/agppp/cve-2019-5736-poc★ 7githubgithub.com/epsteina16/Docker-Escape-Miner★ 3githubgithub.com/GiverOfGifts/CVE-2019-5736-Custom-Runtime★ 1githubgithub.com/likekabin/CVE-2019-5736★ 1githubgithub.com/b3d3c/poc-cve-2019-5736★ 1githubgithub.com/panzouh/Docker-Runc-Exploit★ 1githubgithub.com/milloni/cve-2019-5736-exp★ 1githubgithub.com/Perimora/cve_2019-5736-PoC★ 0githubgithub.com/sastraadiwiguna-purpleeliteteaming/Holistic-Deconstruction-of-CVE-2019-5736-★ 0githubgithub.com/Billith/CVE-2019-5736-PoC★ 0githubgithub.com/yyqs2008/CVE-2019-5736-PoC-2★ 0githubgithub.com/stillan00b/CVE-2019-5736★ 0githubgithub.com/RyanNgWH/CVE-2019-5736-POC★ 0githubgithub.com/Lee-SungYoung/cve-2019-5736-study★ 0githubgithub.com/h-wookie/cve-2019-5736-poc★ 0githubgithub.com/geropl/CVE-2019-5736★ 0githubgithub.com/BBRathnayaka/POC-CVE-2019-5736★ 0githubgithub.com/h3x0v3rl0rd/CVE-2019-5736★ 0githubgithub.com/fahmifj/Docker-breakout-runc★ 0githubgithub.com/takumak/cve-2019-5736-reproducer★ 0githubgithub.com/si1ent-le/CVE-2019-5736★ 0githubgithub.com/sonyavalo/CVE-2019-5736-Dockerattack-and-security-mechanism★ 0githubgithub.com/likekabin/cve-2019-5736-poc★ 0githubgithub.com/shen54/IT19172088★ 0cve_referencepacketstormsecurity.com/files/165197/Docker-runc-Command-Execution-Proof-Of-Concept.htmlnão verificadocve_referencepacketstormsecurity.com/files/163339/Docker-Container-Escape.htmlnão verificadovulncheckvulncheck.com/xdb/4463e53f5834não verificadovulncheckvulncheck.com/xdb/bb174ce4f36cnão verificadovulncheckvulncheck.com/xdb/c317b3d456ddnão verificadovulncheckvulncheck.com/xdb/f12a3e511eadnão verificadovulncheckvulncheck.com/xdb/855a012ee5b4não verificadovulncheckvulncheck.com/xdb/c05359a63da0não verificadovulncheckvulncheck.com/xdb/fc8679cdf2e2não verificadovulncheckvulncheck.com/xdb/4bc294031050não verificadovulncheckvulncheck.com/xdb/a668e29fca88não verificadovulncheckvulncheck.com/xdb/dbfbe09bd96bnão verificadovulncheckvulncheck.com/xdb/fbad66534b9bnão verificadovulncheckvulncheck.com/xdb/c37072317e5dnão verificadovulncheckvulncheck.com/xdb/dfb45d4148e6não verificadovulncheckvulncheck.com/xdb/8b94a95c6eeanão verificadovulncheckvulncheck.com/xdb/34a990f00e33não verificadovulncheckvulncheck.com/xdb/f9fb9c2111f2não verificadocve_referencewww.exploit-db.com/exploits/46369/não verificadocve_referencewww.exploit-db.com/exploits/46359/não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00044.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-04/msg00074.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-04/msg00091.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-05/msg00060.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-05/msg00073.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-06/msg00011.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-06/msg00015.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-08/msg00084.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-10/msg00007.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-10/msg00029.htmlhttp://packetstormsecurity.com/files/163339/Docker-Container-Escape.htmlhttp://packetstormsecurity.com/files/165197/Docker-runc-Command-Execution-Proof-Of-Concept.html