CVE-2021-43784

CWE-190Integer Overflow11 documents8 sources
Severity
5.0MEDIUM
EPSS
0.1%
top 69.92%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedDec 6
Latest updateMay 23

Description

runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc, netlink is used internally as a serialization system for specifying the relevant container configuration to the `C` portion of the code (responsible for the based namespace setup of containers). In all versions of runc prior to 1.0.3, the encoder did not handle the possibility of an integer overflow in the 16-bit length field for the byte array attribute type, meaning that a large enough

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:LExploitability: 1.8 | Impact: 3.7

Affected Packages5 packages

CVEListV5opencontainers/runc< 1.0.3
Gogithub.com/opencontainers/runc1.0.1-0.20211012131345-9c444070ec7b1.1.0+1
Debianrunc< 1.0.0~rc93+ds1-5+deb11u4+3
Ubunturunc< 1.0.0~rc7+git20190403.029124da-0ubuntu1~16.04.4+esm4

Also affects: Debian Linux 9.0

Patches

🔴Vulnerability Details

6
OSV
runc vulnerabilities2023-05-23
OSV
Namespace restriction bypass in github.com/opencontainers/runc2022-07-15
GHSA
Overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration in RunC2021-12-07
OSV
Overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration in RunC2021-12-07
CVEList
Overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration2021-12-06

📋Vendor Advisories

4
Ubuntu
runC vulnerabilities2023-05-23
Microsoft
Overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration2021-12-14
Red Hat
runc: integer overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration2021-12-06
Debian
CVE-2021-43784: runc - runc is a CLI tool for spawning and running containers on Linux according to the...2021
CVE-2021-43784 (MEDIUM CVSS 5) | runc is a CLI tool for spawning and | cvebase.io