Privilege escalation vulnerability in runC via a numeric username in the password file in a container| ID: oval:org.secpod.oval:def:42574 | Date: (C)2017-10-27 (M)2022-09-23 |
| Class: VULNERABILITY | Family: unix |
The host is installed with RunC on Ubuntu 16.04, 17.04 or 17.10 and is prone to a privilege escalation vulnerability. A flaw is present in the application, which fails to properly treat a numeric UID. Successful exploitation could allow attackers to to gain privileges via a numeric username in the password file in a container.
