CVE-2019-10147: rkt through version 1.30.0 does not isolate processes in containers that are run with `rkt enter`. Processes run with `rkt enter` are not limited by cgroups…

high7.7CVSS 3.1

AVLACLPRHUIRSCCHIHAH

rkt through version 1.30.0 does not isolate processes in containers that are run with `rkt enter`. Processes run with `rkt enter` are not limited by cgroups during stage 2 (the actual environment in which the applications run). Compromised containers could exploit this flaw to access host resources.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
redhat	rkt	<= 1.30.0	—

CVSS provenance

nvdv3.17.7HIGHCVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

osv7.7HIGH