CVE-2023-27561: High severity linuxfoundation Runc vulnerability
Last updated 24 July 2024
Other sources
runc 1.0.0-rc95 through 1.1.4 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfslinux.go. To exploit this, an attacker must be able to spawn two containers with custom volume-mount configurations, and be able to run custom images. NOTE: this issue exists because of a CVE-2019-19921 regression.
— GitHub
runc through 1.1.4 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfslinux.go. To exploit this, an attacker must be able to spawn two containers with custom volume-mount configurations, and be able to run custom images. NOTE: this issue exists because of a CVE-2019-19921 regression.
— Launchpad
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-27561.
What is the severity of CVE-2023-27561?
The severity of CVE-2023-27561 is high with a severity value of 7.
How does CVE-2023-27561 lead to an escalation of privileges?
CVE-2023-27561 allows an attacker to spawn two containers with custom volume-mount configurations, enabling them to run custom images and escalate their privileges.
How can I fix CVE-2023-27561 for Ubuntu?
To fix CVE-2023-27561 for Ubuntu, update the runc package to version 1.1.4-0ubuntu1~18.04.2 for Bionic, version 1.1.4-0ubuntu1~20.04.3 for Focal, version 1.1.4-0ubuntu1~22.04.3 for Jammy, version 1.1.4-0ubuntu3.1 for Lunar, or version 1.1.4-0ubuntu1~22.10.3 for Kinetic.
How can I fix CVE-2023-27561 for Debian?
To fix CVE-2023-27561 for Debian, update the runc package to version 1.0.0~rc6+dfsg1-3+deb10u2 or version 1.1.5+ds1-1.