admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-08-04 08:44:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

"-Synchronized-Data."

Browse Source
This commit is contained in:
CVE Team 2021-02-02 19:00:42 +00:00
parent 2f7fec95b2
commit b963ccfcaa
No known key found for this signature in database
GPG Key ID: 5708902F06FEF743
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
2021/21xxx/CVE-2021-21284.json
View File

@ -38,7 +38,7 @@
"description_data": [
{
"lang": "eng",
"value": "In Docker before versions 9.03.15, 20.10.3 there is a vulnerability involving the --userns-remap option in which access to remapped root allows privilege escalation to real root.\n\nWhen using \"--userns-remap\", if the root user in the remapped namespace has access to the host filesystem they can modify files under \"/var/lib/docker/<remapping>\" that cause writing files with extended privileges.\n\nVersions 20.10.3 and 19.03.15 contain patches that prevent privilege escalation from remapped user.\n\n\n"
"value": "In Docker before versions 9.03.15, 20.10.3 there is a vulnerability involving the --userns-remap option in which access to remapped root allows privilege escalation to real root. When using \"--userns-remap\", if the root user in the remapped namespace has access to the host filesystem they can modify files under \"/var/lib/docker/<remapping>\" that cause writing files with extended privileges. Versions 20.10.3 and 19.03.15 contain patches that prevent privilege escalation from remapped user."
}
]
},
@ -72,11 +72,6 @@
},
"references": {
"reference_data": [
{
"name": "https://github.com/moby/moby/security/advisories/GHSA-7452-xqpj-6rpc",
"refsource": "CONFIRM",
"url": "https://github.com/moby/moby/security/advisories/GHSA-7452-xqpj-6rpc"
},
{
"name": "https://docs.docker.com/engine/release-notes/#20103",
"refsource": "MISC",
@ -92,6 +87,11 @@
"refsource": "MISC",
"url": "https://github.com/moby/moby/releases/tag/v19.03.15"
},
{
"name": "https://github.com/moby/moby/security/advisories/GHSA-7452-xqpj-6rpc",
"refsource": "CONFIRM",
"url": "https://github.com/moby/moby/security/advisories/GHSA-7452-xqpj-6rpc"
},
{
"name": "https://github.com/moby/moby/commit/64bd4485b3a66a597c02c95f5776395e540b2c7c",
"refsource": "MISC",