Related Articles
All Mix →
Indulgence as God
I was getting into the elevator today, running back and forth between managing a long-term vendor project and keeping things under control with my other…
7 Essential Firefox Quicksearches | Daniel Miessler
If you’re not yet using Firefox Quicksearches you’re missing out. Quicksearches allow you to search virtually anything directly from the Firefox URL field. Here I…
AI Hacking Agents Will Outperform Humans · Joseph Thacker
Table of Contents The Logic for How This is just the beginning Unknown Attack Vectors Wrapping up I believe AI Agents will outhack humans. Here’s…
Iteration in Python: for, list, and map
The basics of writing iterations in Python using for loops, list comprehensions, and map. 2017-01-18 21:58:28 +0700 +0700 January 18, 2017 Updated: Nov 22, 2020…
What a week! – HackerOne at WIRED Security
This week has been a whirlwind here at HackerOne! In addition to announcing a new partnership with the U.S. Department of Defense and the winners…
The Hidden Risks Lurking in Your Business Logic
Table of Contents Challenging the Myth of Secure Internal APIs The Risks of Vulnerable Business APIs Proactive Strategies for Securing Business APIs Protection from Business…
Impact
When using
--userns-remap, if the root user in the remapped namespace has access to the host filesystem they can modify files under/var/lib/docker/that cause writing files with extended privileges.Patches
Versions 20.10.3 and 19.03.15 contain patches that prevent privilege escalation from remapped user.
Credits
Maintainers would like to thank Alex Chapman for discovering the vulnerability; @awprice, @nathanburrell, @raulgomis, @chris-walz, @erin-jensby, @BassMatt, @mark-adams, @dbaxa for working on it and Zac Ellis for responsibly disclosing it to security@docker.com