VYPR

Runv

by Hyper

CVEs (1)

  • CVE-2018-9862HigApr 9, 2018
    risk 0.00cvss 7.8epss 0.00

    util.c in runV 1.0.0 for Docker mishandles a numeric username, which allows attackers to obtain root access by leveraging the presence of an initial numeric value on an /etc/passwd line, and then issuing a "docker exec" command with that value in the -u argument, a similar issue…