Containers on fire: from container escapes to supply chain attacks
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-5736 | runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host… | 8.6 | 98% | PoC ×4 | |
| CVE-2022-0492 | Linux Kernel Cgroups v1 release_agent Privilege Escalation and Container Escape | 7.8 | 6% | KEVPoC | KEV |
| CVE-2024-21626 | runc is a CLI tool for spawning and running containers on Linux according to the OCI specification | 8.6 | 19% | PoC ×2 |
From the original article
13 min read at securelist.com
Modern infrastructures universally rely on containerization to deploy applications, scale services, and build cloud platforms. The use of Docker, Kubernetes, and similar technologies has become the corporate standard for efficient automation. However, as containers grow in popularity, so does the interest of malicious actors — a trend we actively track in our research into advanced cyberthreats.
By @Securelist · securelist.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.