VYPR

Runv

by Hyperhq

Source repositories

CVEs (1)

  • CVE-2018-9862Apr 9, 2018
    risk 0.00cvss epss 0.00

    util.c in runV 1.0.0 for Docker mishandles a numeric username, which allows attackers to obtain root access by leveraging the presence of an initial numeric value on an /etc/passwd line, and then issuing a "docker exec" command with that value in the -u argument, a similar issue…