Title: runc Open-Source Container Vulnerability

Published: Mon, 11 Feb 2019 19:26:27 +0000

Original release date: February 11, 2019

The National Cybersecurity and Communications Integration Center (NCCIC), part of the Cybersecurity and Infrastructure Security Agency (CISA), is aware of a vulnerability affecting several open-source container management systems that leverage runc.

NCCIC encourages users and administrators to review the runc security advisory, and the RedHat and Amazon Web Services blogs; and refer to OS and application vendors for mitigations and updates as they become available.


This product is provided subject to this Notification and this Privacy & Use policy.

Source: US-CERT.GOV