Docker Patched the Most Severe Copy Vulnerability to Date With CVE-2019-14271

guest · Nov 20, 2019

Docker Patched the Most Severe Copy Vulnerability to Date With CVE-2019-14271
November 19, 2019
https://unit42.paloaltonetworks.com...py-vulnerability-to-date-with-cve-2019-14271/

The most severe among those was only recently discovered and disclosed in July. Surprisingly, it gained almost no immediate attention, perhaps due to an ambiguous CVE description and a lack of a published exploit.

CVE-2019-14271 marks a security issue in the implementation of the Docker cp command that can lead to full container escape when exploited by an attacker. This is the first complete container breakout since the severe runC vulnerability discovered back in February.
The vulnerability can be exploited, provided that a container has been compromised by a previous attack (e.g. through any other vulnerability, leaked secrets, etc.), or when a user runs a malicious container image from an untrusted source (registry or other).

CVE-2019-14271 was marked as critical and fixed in Docker version 19.03.1. The following research is an overview of CVE-2019-14271 and the first Proof of Concept (PoC) of the vulnerability.
Click to expand...

Conclusion
A vulnerability allowing root code execution on the host is highly dangerous. Make sure you’re running Docker version 19.03.1 or newer versions, which include the fix to this security issue. To restrict the attack surface for this kind of attacks, I strongly suggest to never run untrusted images.
Click to expand...

Log in or Sign up

Docker Patched the Most Severe Copy Vulnerability to Date With CVE-2019-14271

guest Guest

Log in or Sign up

Docker Patched the Most Severe Copy Vulnerability to Date With CVE-2019-14271

guest Guest

Useful Searches