7

CVE-2019-19921: canonical ubuntu_linux

Modified
AliasesMGASA-2020-0103SUSE-SU-2020:0375-1SUSE-SU-2020:0376-1
Published 12-02-2020Last modified 05-08-2024

Vulnerability summary

CVE-2019-19921 is a high (CVSS 7.0) vulnerability in canonical ubuntu_linux. EPSS estimates a 0.43% chance of exploitation in the next 30 days, higher than 37.6% of scored vulnerabilities.

Priority
Routine

Not severe (CVSS 7, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
7.0/10
010
High · v3.1 (NVD)
EPSS score
0.43%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 6 · Related 7
DLA-3369-1OPENSUSE-SU-2024:11358-1RHSA-2020:1650SUSE-SU-2021:1458-1USN-4297-1USN-6088-2

Timeline

  1. 12-02-2020
    PublishedVulnerability first disclosed.
  2. 05-08-2024
    Last modifiedVulnerability information updated.

Description

runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit this, an attacker must be able to spawn two containers with custom volume-mount configurations, and be able to run custom images. (This vulnerability does not affect Docker due to an implementation detail that happens to block the attack.)

CVSS metrics

9 scores · 8 sources · 2 versions

EPSS trend

Probability

0.43%

Chance of exploitation in the next 30 days

Percentile

38%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.43% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat4 products
  • openshift_container_platform4.1 | 4.2
  • runc< 0:1.0.0-63.rc10.rhaos4.2.gitdc9208a.el8 | < 0:1.0.0-63.rc8.rhaos4.1.git3cbe540.el8_0 | < 0:1.0.0-66.rc8.el7_7 | < 0:1.0.0-66.rc10.rhaos4.3.el7_8
  • runc-debuginfo< 0:1.0.0-63.rc10.rhaos4.2.gitdc9208a.el8 | < 0:1.0.0-63.rc8.rhaos4.1.git3cbe540.el8_0 | < 0:1.0.0-66.rc8.el7_7 | < 0:1.0.0-66.rc10.rhaos4.3.el7_8
  • runc-debugsource< 0:1.0.0-63.rc10.rhaos4.2.gitdc9208a.el8 | < 0:1.0.0-63.rc8.rhaos4.1.git3cbe540.el8_0
Suse3 products
  • docker-runc&distro=SUSE Linux Enterprise Module for Containers 12< 1.0.0rc8+gitr3917_3e425f80a8c9-1.40.1
  • docker-runc&distro=SUSE Linux Enterprise Module for Containers 15 SP1< 1.0.0rc8+gitr3917_3e425f80a8c9-6.32.1
  • runc&distro=SUSE Linux Enterprise Module for Containers 15 SP1< 1.0.0~rc10-1.9.1
Alpine2 products
  • containerd< 1.3.3-r0
  • runc< 1.0.0_rc10 | < 1.0.0_rc10-r0
Chainguard2 products
  • runcAll versions (No fix recorded)
  • runc-docAll versions (No fix recorded)
Debian2 products
Opensuse2 products
  • leapEOL15.1
  • docker-runc&distro=openSUSE Leap 15.1< 1.0.0rc8+gitr3917_3e425f80a8c9-lp151.3.15.1
Wolfi2 products
  • runcAll versions (No fix recorded)
  • runc-docAll versions (No fix recorded)
Canonical1 product
Github.com/opencontainers1 product
  • runc< 1.0.0-rc9.0.20200122160610-2fc03cc11c77
Linuxfoundation1 product
  • runc≤ 0.1.1 | 1.0.0:rc1 | 1.0.0:rc2 | 1.0.0:rc3 | 1.0.0:rc4 | 1.0.0:rc5 | 1.0.0:rc6 | 1.0.0:rc7 | 1.0.0:rc8 | 1.0.0:rc9
Mageia1 product
  • opencontainers-runc< 1.0.0-0.rc10.3.1.mga7
Ubuntu1 product
  • runc< 1.0.0~rc7+git20190403.029124da-0ubuntu1~16.04.4+esm4 | < 1.0.0~rc10-0ubuntu1~18.04.2 | < 1.0.0~rc10-0ubuntu1

12 vendors · 22 products

References

51 links
Show all 51 references