Description
TinyLab linux-lab v1.1-rc1 and cloud-labv0.8-rc2, v1.1-rc1 are vulnerable to insecure permissions. The default configuration could cause Container Escape.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://github.com/tinyclub/linux-lab/issues/14 ↗
- https://hackmd.io/%40UR9gnr32QymtmtZHnZceOw/ry428EZGo ↗
- https://github.com/tinyclub/cloud-lab/blob/d19ff92713685a7fb84b423dea6a184b25c378c9/configs/common/seccomp-profiles-default.json ↗
- https://github.com/eBPF-Research/eBPF-Attack/blob/main/PoC.md#attack-requirements ↗
- https://www.usenix.org/conference/usenixsecurity23/presentation/he ↗