Integer overflow in runc - CVE-2021-43784

Vulnerability identifier: #VU58522

CSH Severity: Medium

CVSS v4 BT: 6.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-43784

CWE-ID: CWE-190

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to integer overflow in netlink bytemsg length field. A remote authenticated attacker can pass specially crafted data to the application, trigger integer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

runc
Cloud Pak for Data
Gentoo Linux
Oracle Linux
SUSE MicroOS
SUSE Enterprise Storage
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
SUSE Linux Enterprise Module for Containers
Ubuntu
QRadar Suite
DB2 Data Management Console
Guardium Data Security Center (GDSC)
DB2 Data Management Console on CPD
DB2 on Cloud Pak for Data
IBM Edge Application Manager
runc (Ubuntu package)
runc
runc-debuginfo
runc (Red Hat package)
app-containers/runc
IBM Cloud Pak for Business Automation

Install updates from vendor's website.

runc - update to 1.0.3
QRadar Suite - update to 1.10.21.0
DB2 Data Management Console - update to 3.1.13.1
Guardium Data Security Center (GDSC) - update to 3.8.5
DB2 Data Management Console on CPD - update to 4.7.2
runc (Ubuntu package) - update to Ubuntu Pro
runc - addressed in versions 1.0.3-16.18.1, 1.0.3-27.1
runc-debuginfo - addressed in versions 1.0.3-16.18.1, 1.0.3-27.1
runc (Red Hat package) - update to 1.1.9-1.el9
app-containers/runc - update to 1.1.12
DB2 on Cloud Pak for Data - update to 4.8.4
Cloud Pak for Data - update to 4.8.5
IBM Cloud Pak for Business Automation - addressed in versions 21.0.3-IF039, 24.0.0-IF004, 24.0.1

• https://github.com/opencontainers/runc/releases/tag/v1.0.3
• https://github.com/opencontainers/runc/security/advisories/GHSA-v95c-p5hm-xq8f

• Integer overflow in runc
• SUSE update for runc
• SUSE update for runc
• IBM Edge Application Manager update for runc
• Ubuntu update for runc
• Red Hat Enterprise Linux 9 update for runc
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in IBM QRadar Suite software
• Multiple vulnerabilities in IBM Db2 on Cloud Pak for Data
• Gentoo update for runc
• Multiple vulnerabilities in IBM Cloud Pak for Data
• Multiple vulnerabilities in IBM Cloud Pak for Business Automation
• Multiple vulnerabilities in IBM DB2 Data Management Console
• Multiple vulnerabilities in IBM Guardium Data Security Center