Vulnerabilities (CVE)

Filtered by CWE-250
Total 102 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-10856 1 Libpod Project 1 Libpod 2019-10-09 6.5 MEDIUM 8.8 HIGH
It has been discovered that podman before version 0.6.1 does not drop capabilities when executing a container as a non-root user. This results in unnecessary privileges being granted to the container.
CVE-2018-10853 3 Canonical, Debian, Linux 3 Ubuntu Linux, Debian Linux, Linux Kernel 2019-10-03 4.6 MEDIUM 7.8 HIGH
A flaw was found in the way Linux kernel KVM hypervisor before 4.18 emulated instructions such as sgdt/sidt/fxsave/fxrstor. It did not check current privilege(CPL) level while emulating unprivileged instructions. An unprivileged guest user/process could use this flaw to potentially escalate privileges inside guest.