CVE-2018-9862

CVE-2018-9862

util.c in runV 1.0.0 for Docker mishandles a numeric username, which allows attackers to obtain root access by leveraging the presence of an initial numeric value on an /etc/passwd line, and then issuing a "docker exec" command with that value in the -u argument, a similar issue to CVE-2016-3697.

Source: CVE-2018-9862

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다