USN-6619-1: runC vulnerability
Rory McNamara discovered that runC did not properly manage internal file descriptor while managing containers. An attacker could possibly use this issue to obtain sensitive information or bypass container restrictions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-6619-1?
The severity of USN-6619-1 is considered critical due to the potential for sensitive information disclosure and bypassing container restrictions.
How do I fix USN-6619-1?
To fix USN-6619-1, update the runC package to the recommended version corresponding to your Ubuntu release.
What versions of Ubuntu are affected by USN-6619-1?
USN-6619-1 affects Ubuntu versions 18.04, 20.04, 22.04, and 23.10.
What issue does USN-6619-1 address?
USN-6619-1 addresses a vulnerability in runC that allows improper management of internal file descriptors, which can lead to security issues.
Who discovered the vulnerability in USN-6619-1?
The vulnerability addressed by USN-6619-1 was discovered by researcher Rory McNamara.