[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fQnBWbivE-d809taUBJcsYl453jZoCMSC_rcGwUX0lb8":3,"g5a-risk:CVE-2019-5736":555},{"success":4,"data":5,"meta":553},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":27,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":160,"references":161,"referencesCount":336,"weaknesses":337,"weaknessesCount":346,"isActivelyExploited":347,"cisaInfo":27,"otxData":27,"relatedBlogPosts":348,"seoMetadata":349,"configurations":374,"relatedVendorCves":537,"notableEvents":538},"CVE-2019-5736","What is CVE-2019-5736?","runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to \u002Fproc\u002Fself\u002Fexe.","runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host r...","2019-02-11T19:29:00.297","2024-02-02T12:15:48.367",8.6,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":26,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","LOCAL","LOW","NONE","REQUIRED","CHANGED","HIGH",null,1.8,6,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":26,"ExploitabilityScore":12,"ImpactScore":39,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":4},{"Version":33,"VectorString":34,"AccessVector":35,"AccessComplexity":36,"Authentication":23,"ConfidentialityImpact":37,"IntegrityImpact":37,"AvailabilityImpact":37,"BaseScore":38,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","NETWORK","MEDIUM","COMPLETE",9.3,10,0.98452,[40,40,40,40,40,40,40],"High",[44,48,52,55,60,64,67,70,72,76,80,85,89,93,97,100,104,109,112,115,118,121,124,129,132,137,140,143,146,151,154,157],{"vendor":45,"product":45,"version":46,"criteria":47,"vulnerable":4},"docker","*","cpe:2.3:a:docker:docker:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":46,"criteria":51,"vulnerable":4},"linuxfoundation","runc","cpe:2.3:a:linuxfoundation:runc:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":53,"criteria":54,"vulnerable":4},"1.0.0","cpe:2.3:a:linuxfoundation:runc:1.0.0:rc1:*:*:*:*:*:*",{"vendor":56,"product":57,"version":58,"criteria":59,"vulnerable":4},"redhat","container_development_kit","3.7","cpe:2.3:a:redhat:container_development_kit:3.7:*:*:*:*:*:*:*",{"vendor":56,"product":61,"version":62,"criteria":63,"vulnerable":4},"openshift","3.4","cpe:2.3:a:redhat:openshift:3.4:*:*:*:*:*:*:*",{"vendor":56,"product":61,"version":65,"criteria":66,"vulnerable":4},"3.5","cpe:2.3:a:redhat:openshift:3.5:*:*:*:*:*:*:*",{"vendor":56,"product":61,"version":68,"criteria":69,"vulnerable":4},"3.6","cpe:2.3:a:redhat:openshift:3.6:*:*:*:*:*:*:*",{"vendor":56,"product":61,"version":58,"criteria":71,"vulnerable":4},"cpe:2.3:a:redhat:openshift:3.7:*:*:*:*:*:*:*",{"vendor":56,"product":73,"version":74,"criteria":75,"vulnerable":4},"enterprise_linux","8.0","cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",{"vendor":56,"product":77,"version":78,"criteria":79,"vulnerable":4},"enterprise_linux_server","7.0","cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",{"vendor":81,"product":82,"version":83,"criteria":84,"vulnerable":4},"google","kubernetes_engine","-","cpe:2.3:a:google:kubernetes_engine:-:*:*:*:*:*:*:*",{"vendor":86,"product":87,"version":46,"criteria":88,"vulnerable":4},"linuxcontainers","lxc","cpe:2.3:a:linuxcontainers:lxc:*:*:*:*:*:*:*:*",{"vendor":90,"product":91,"version":83,"criteria":92,"vulnerable":4},"hp","onesphere","cpe:2.3:a:hp:onesphere:-:*:*:*:*:*:*:*",{"vendor":94,"product":95,"version":83,"criteria":96,"vulnerable":4},"netapp","hci_management_node","cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*",{"vendor":94,"product":98,"version":83,"criteria":99,"vulnerable":4},"solidfire","cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*",{"vendor":101,"product":102,"version":46,"criteria":103,"vulnerable":4},"apache","mesos","cpe:2.3:a:apache:mesos:*:*:*:*:*:*:*:*",{"vendor":105,"product":106,"version":107,"criteria":108,"vulnerable":4},"opensuse","backports_sle","15.0","cpe:2.3:a:opensuse:backports_sle:15.0:-:*:*:*:*:*:*",{"vendor":105,"product":110,"version":107,"criteria":111,"vulnerable":4},"leap","cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*",{"vendor":105,"product":110,"version":113,"criteria":114,"vulnerable":4},"15.1","cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",{"vendor":105,"product":110,"version":116,"criteria":117,"vulnerable":4},"42.3","cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*",{"vendor":119,"product":82,"version":46,"criteria":120,"vulnerable":4},"d2iq","cpe:2.3:a:d2iq:kubernetes_engine:*:*:*:*:*:*:*:*",{"vendor":119,"product":122,"version":46,"criteria":123,"vulnerable":4},"dc\\\u002Fos","cpe:2.3:o:d2iq:dc\\\u002Fos:*:*:*:*:*:*:*:*",{"vendor":125,"product":126,"version":127,"criteria":128,"vulnerable":4},"fedoraproject","fedora","29","cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*",{"vendor":125,"product":126,"version":130,"criteria":131,"vulnerable":4},"30","cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*",{"vendor":133,"product":134,"version":135,"criteria":136,"vulnerable":4},"canonical","ubuntu_linux","16.04","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",{"vendor":133,"product":134,"version":138,"criteria":139,"vulnerable":4},"18.04","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",{"vendor":133,"product":134,"version":141,"criteria":142,"vulnerable":4},"18.10","cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*",{"vendor":133,"product":134,"version":144,"criteria":145,"vulnerable":4},"19.04","cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*",{"vendor":147,"product":148,"version":149,"criteria":150,"vulnerable":4},"microfocus","service_management_automation","2018.02","cpe:2.3:a:microfocus:service_management_automation:2018.02:*:*:*:*:*:*:*",{"vendor":147,"product":148,"version":152,"criteria":153,"vulnerable":4},"2018.05","cpe:2.3:a:microfocus:service_management_automation:2018.05:*:*:*:*:*:*:*",{"vendor":147,"product":148,"version":155,"criteria":156,"vulnerable":4},"2018.08","cpe:2.3:a:microfocus:service_management_automation:2018.08:*:*:*:*:*:*:*",{"vendor":147,"product":148,"version":158,"criteria":159,"vulnerable":4},"2018.11","cpe:2.3:a:microfocus:service_management_automation:2018.11:*:*:*:*:*:*:*",32,[162,168,171,174,177,180,183,186,189,192,195,201,204,208,211,214,217,220,223,226,229,232,236,240,243,246,249,252,255,258,262,268,271,276,281,286,290,294,298,301,304,307,310,314,318,321,324,327,330,333],{"url":163,"source":164,"tags":165},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-03\u002Fmsg00044.html","Opensuse",[166,167],"Mailing List","Third Party Advisory",{"url":169,"source":164,"tags":170},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-04\u002Fmsg00074.html",[166,167],{"url":172,"source":164,"tags":173},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-04\u002Fmsg00091.html",[166,167],{"url":175,"source":164,"tags":176},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-05\u002Fmsg00060.html",[166,167],{"url":178,"source":164,"tags":179},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-05\u002Fmsg00073.html",[166,167],{"url":181,"source":164,"tags":182},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-06\u002Fmsg00011.html",[166,167],{"url":184,"source":164,"tags":185},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-06\u002Fmsg00015.html",[166,167],{"url":187,"source":164,"tags":188},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-08\u002Fmsg00084.html",[166,167],{"url":190,"source":164,"tags":191},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-10\u002Fmsg00007.html",[166,167],{"url":193,"source":164,"tags":194},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-10\u002Fmsg00029.html",[166,167],{"url":196,"source":197,"tags":198},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F163339\u002FDocker-Container-Escape.html","Packetstormsecurity",[199,167,200],"Exploit","VDB Entry",{"url":202,"source":197,"tags":203},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F165197\u002FDocker-runc-Command-Execution-Proof-Of-Concept.html",[167,200],{"url":205,"source":206,"tags":207},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2019\u002F03\u002F23\u002F1","Openwall",[166,167],{"url":209,"source":206,"tags":210},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2019\u002F06\u002F28\u002F2",[166,167],{"url":212,"source":206,"tags":213},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2019\u002F07\u002F06\u002F3",[166,167],{"url":215,"source":206,"tags":216},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2019\u002F07\u002F06\u002F4",[166,167],{"url":218,"source":206,"tags":219},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2019\u002F10\u002F24\u002F1",[166,167],{"url":221,"source":206,"tags":222},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2019\u002F10\u002F29\u002F3",[166,167],{"url":224,"source":206,"tags":225},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F01\u002F31\u002F6",[],{"url":227,"source":206,"tags":228},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F02\u002F01\u002F1",[],{"url":230,"source":206,"tags":231},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F02\u002F02\u002F3",[],{"url":233,"source":234,"tags":235},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F106976","Securityfocus",[167,200],{"url":237,"source":238,"tags":239},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:0303","Red Hat",[167],{"url":241,"source":238,"tags":242},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:0304",[167],{"url":244,"source":238,"tags":245},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:0401",[167],{"url":247,"source":238,"tags":248},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:0408",[167],{"url":250,"source":238,"tags":251},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:0975",[167],{"url":253,"source":238,"tags":254},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002Fcve-2019-5736",[167],{"url":256,"source":238,"tags":257},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fvulnerabilities\u002Fruncescape",[167],{"url":259,"source":260,"tags":261},"https:\u002F\u002Faws.amazon.com\u002Fsecurity\u002Fsecurity-bulletins\u002FAWS-2019-002\u002F","Amazon",[167],{"url":263,"source":264,"tags":265},"https:\u002F\u002Fazure.microsoft.com\u002Fen-us\u002Fupdates\u002Fcve-2019-5736-and-runc-vulnerability\u002F","Microsoft",[266,167,267],"Patch","Vendor Advisory",{"url":269,"source":264,"tags":270},"https:\u002F\u002Fazure.microsoft.com\u002Fen-us\u002Fupdates\u002Fiot-edge-fix-cve-2019-5736\u002F",[266,167,267],{"url":272,"source":273,"tags":274},"https:\u002F\u002Fblog.dragonsector.pl\u002F2019\u002F02\u002Fcve-2019-5736-escape-from-docker-and.html","Dragonsector",[199,275,167],"Mitigation",{"url":277,"source":278,"tags":279},"https:\u002F\u002Fbrauner.github.io\u002F2019\u002F02\u002F12\u002Fprivileged-containers.html","Github",[199,280,167],"Technical Description",{"url":282,"source":283,"tags":284},"https:\u002F\u002Fbugzilla.suse.com\u002Fshow_bug.cgi?id=1121967","Suse",[285,266,167],"Issue Tracking",{"url":287,"source":288,"tags":289},"https:\u002F\u002Fcloud.google.com\u002Fkubernetes-engine\u002Fdocs\u002Fsecurity-bulletins#february-11-2019-runc","Google",[167],{"url":291,"source":292,"tags":293},"https:\u002F\u002Fgithub.com\u002FFrichetten\u002FCVE-2019-5736-PoC","GitHub",[199,167],{"url":295,"source":292,"tags":296},"https:\u002F\u002Fgithub.com\u002Fdocker\u002Fdocker-ce\u002Freleases\u002Ftag\u002Fv18.09.2",[297,167],"Release Notes",{"url":299,"source":292,"tags":300},"https:\u002F\u002Fgithub.com\u002Fopencontainers\u002Frunc\u002Fcommit\u002F0a8e4117e7f715d5fbeef398405813ce8e88558b",[266,167],{"url":302,"source":292,"tags":303},"https:\u002F\u002Fgithub.com\u002Fopencontainers\u002Frunc\u002Fcommit\u002F6635b4f0c6af3810594d2770f662f34ddc15b40d",[266,167],{"url":305,"source":292,"tags":306},"https:\u002F\u002Fgithub.com\u002Fq3k\u002Fcve-2019-5736-poc",[199,167],{"url":308,"source":292,"tags":309},"https:\u002F\u002Fgithub.com\u002Francher\u002Frunc-cve",[167],{"url":311,"source":312,"tags":313},"https:\u002F\u002Fkubernetes.io\u002Fblog\u002F2019\u002F02\u002F11\u002Frunc-and-cve-2019-5736\u002F","Kubernetes",[167],{"url":315,"source":316,"tags":317},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002F24e54e3c6b2259e3903b6b8fe26896ac649c481ea99c5739468c92a3%40%3Cdev.dlab.apache.org%3E","Apache",[],{"url":319,"source":316,"tags":320},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fa258757af84c5074dc7bf932622020fd4f60cef65a84290380386706%40%3Cuser.mesos.apache.org%3E",[],{"url":322,"source":316,"tags":323},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fa585f64d14c31ab393b90c5f17e41d9765a1a17eec63856ce750af46%40%3Cdev.dlab.apache.org%3E",[],{"url":325,"source":316,"tags":326},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Facacf018c12636e41667e94ac0a1e9244e887eef2debdd474640aa6e%40%3Cdev.dlab.apache.org%3E",[],{"url":328,"source":316,"tags":329},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fb162dd624dc088cd634292f0402282a1d1d0ce853baeae8205bc033c%40%3Cdev.mesos.apache.org%3E",[],{"url":331,"source":316,"tags":332},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frc494623986d76593873ce5a40dd69cb3629400d10750d5d7e96b8587%40%3Cdev.dlab.apache.org%3E",[],{"url":334,"source":316,"tags":335},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E",[],50,[338],{"id":339,"name":340,"description":341,"extendedDescription":342,"status":343,"abstraction":344,"structure":345},"CWE-78","Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.","This weakness can lead to a vulnerability in environments in which the attacker does not have direct access to the operating system, such as in web applications. Alternately, if the weakness occurs in a privileged program, it could allow the attacker to specify commands that normally would not be accessible, or to call alternate commands with privileges that the attacker does not have. The problem is exacerbated if the compromised process does not follow the principle of least privilege, because the attacker-controlled commands may run with special system privileges that increases the amount of damage.\nThere are at least two subtypes of OS command injection:\nFrom a weakness standpoint, these variants represent distinct programmer errors. In the first variant, the programmer clearly intends that input from untrusted parties will be part of the arguments in the command to be executed. In the second variant, the programmer does not intend for the command to be accessible to any untrusted party, but the programmer probably has not accounted for alternate ways in which malicious attackers can provide input.","Stable","Base","Simple",1,false,[],{"title":350,"metaDescription":351,"keywords":352,"canonicalUrl":353,"structuredData":354},"What is CVE-2019-5736? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2019-5736, a high severity cyber security vulnerability from 2019. High exploit probability (98.5%). runc through 1.0-rc6, as u...","CVE-2019-5736, CVE-2019-5736 vulnerability, CVE-2019-5736 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, docker security, linuxfoundation security, redhat security, docker vulnerability, runc vulnerability, container_development_kit vulnerability, openshift vulnerability, enterprise_linux vulnerability","\u002Fwhat-is\u002Fcve-2019-5736",{"@context":355,"@type":356,"headline":350,"description":351,"datePublished":10,"dateModified":11,"author":357,"publisher":361,"about":365,"mainEntityOfPage":369,"articleSection":372,"keywords":373},"https:\u002F\u002Fschema.org","TechArticle",{"@type":358,"name":359,"url":360},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":358,"name":359,"url":360,"logo":362},{"@type":363,"url":364},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":366,"name":6,"description":367,"additionalType":368},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":370,"@id":371},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2019-5736","Cybersecurity","CVE-2019-5736, CVE-2019-5736 vulnerability, CVE-2019-5736 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[375,383,407,425,431,438,444,452,472,487,505,513,525],{"Operator":27,"Negate":27,"Nodes":376},[377],{"Operator":378,"Negate":27,"CPEMatch":379},"OR",[380],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":381,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":382,"VersionEndIncluding":27},"A367C4FA-18DF-402F-B120-254B35F73BD1","18.09.2",{"Operator":27,"Negate":27,"Nodes":384},[385],{"Operator":378,"Negate":27,"CPEMatch":386},[387,390,392,395,398,401,404],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":388,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":389},"D522E8C1-E7F0-4A3D-AF68-6D962944A0E5","0.1.1",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":391,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"949172CC-EBB5-47F6-B987-207C802EED0F",{"Vulnerable":4,"Criteria":393,"MatchCriteriaID":394,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:linuxfoundation:runc:1.0.0:rc2:*:*:*:*:*:*","F6D87B50-2849-4F4D-A0F9-4F7EBA3C2647",{"Vulnerable":4,"Criteria":396,"MatchCriteriaID":397,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:linuxfoundation:runc:1.0.0:rc3:*:*:*:*:*:*","3E580E25-F94C-4DA4-8718-15D5F1C3ADAF",{"Vulnerable":4,"Criteria":399,"MatchCriteriaID":400,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:linuxfoundation:runc:1.0.0:rc4:*:*:*:*:*:*","FD565CE0-D9E9-4FD9-8998-8AC55030FAB7",{"Vulnerable":4,"Criteria":402,"MatchCriteriaID":403,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:linuxfoundation:runc:1.0.0:rc5:*:*:*:*:*:*","093326B1-448C-4E3B-886D-CAC8B6813BFF",{"Vulnerable":4,"Criteria":405,"MatchCriteriaID":406,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:linuxfoundation:runc:1.0.0:rc6:*:*:*:*:*:*","F672C421-789D-4F21-B483-DA3EB251BA1D",{"Operator":27,"Negate":27,"Nodes":408},[409],{"Operator":378,"Negate":27,"CPEMatch":410},[411,413,415,417,419,421,423],{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":412,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"48FAFDE5-1E73-4874-8F2E-3C74B1955096",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":414,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"785C0A0D-5FF3-43D5-B89F-DCB2D6FDE310",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":416,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"E9955945-7509-4542-BF83-B7BA0B4D8D05",{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":418,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A52F7AE1-754D-4EE1-8EC1-7765292B4C2D",{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":420,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"55349BC5-90EC-4954-8CEB-3C37D34742C4",{"Vulnerable":4,"Criteria":75,"MatchCriteriaID":422,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"F4CFF558-3C47-480D-A2F0-BABF26042943",{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":424,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"51EF4996-72F4-4FA4-814F-F5991E7A8318",{"Operator":27,"Negate":27,"Nodes":426},[427],{"Operator":378,"Negate":27,"CPEMatch":428},[429],{"Vulnerable":4,"Criteria":84,"MatchCriteriaID":430,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"3C2EB454-D0C9-47FC-B727-1D61A8811967",{"Operator":27,"Negate":27,"Nodes":432},[433],{"Operator":378,"Negate":27,"CPEMatch":434},[435],{"Vulnerable":4,"Criteria":88,"MatchCriteriaID":436,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":437,"VersionEndIncluding":27},"1AF77BB2-6F7A-408A-9F54-60F1F53B3709","3.2.0",{"Operator":27,"Negate":27,"Nodes":439},[440],{"Operator":378,"Negate":27,"CPEMatch":441},[442],{"Vulnerable":4,"Criteria":92,"MatchCriteriaID":443,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"41FF9E5A-7BD1-477E-9875-8525FD87B13F",{"Operator":27,"Negate":27,"Nodes":445},[446],{"Operator":378,"Negate":27,"CPEMatch":447},[448,450],{"Vulnerable":4,"Criteria":96,"MatchCriteriaID":449,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A3C19813-E823-456A-B1CE-EC0684CE1953",{"Vulnerable":4,"Criteria":99,"MatchCriteriaID":451,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A6E9EF0C-AFA8-4F7B-9FDC-1E0F7C26E737",{"Operator":27,"Negate":27,"Nodes":453},[454],{"Operator":378,"Negate":27,"CPEMatch":455},[456,460,464,468],{"Vulnerable":4,"Criteria":103,"MatchCriteriaID":457,"VersionStartExcluding":27,"VersionStartIncluding":458,"VersionEndExcluding":459,"VersionEndIncluding":27},"CA0695E0-954A-4533-9D93-58257E9EA6D5","1.4.0","1.4.3",{"Vulnerable":4,"Criteria":103,"MatchCriteriaID":461,"VersionStartExcluding":27,"VersionStartIncluding":462,"VersionEndExcluding":463,"VersionEndIncluding":27},"B51B8DF0-FCE4-42A7-A582-0476226C6188","1.5.0","1.5.3",{"Vulnerable":4,"Criteria":103,"MatchCriteriaID":465,"VersionStartExcluding":27,"VersionStartIncluding":466,"VersionEndExcluding":467,"VersionEndIncluding":27},"01878119-E05A-469B-B49D-5D19082CED28","1.6.0","1.6.2",{"Vulnerable":4,"Criteria":103,"MatchCriteriaID":469,"VersionStartExcluding":27,"VersionStartIncluding":470,"VersionEndExcluding":471,"VersionEndIncluding":27},"1AB1BB7C-46A1-4676-9D15-D75EC1E4594C","1.7.0","1.7.2",{"Operator":27,"Negate":27,"Nodes":473},[474],{"Operator":378,"Negate":27,"CPEMatch":475},[476,478,481,483,485],{"Vulnerable":4,"Criteria":108,"MatchCriteriaID":477,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"D83DA865-E4A6-4FBF-AA1B-A969EBA6B2AD",{"Vulnerable":4,"Criteria":479,"MatchCriteriaID":480,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:*","40513095-7E6E-46B3-B604-C926F1BA3568",{"Vulnerable":4,"Criteria":111,"MatchCriteriaID":482,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"F1E78106-58E6-4D59-990F-75DA575BFAD9",{"Vulnerable":4,"Criteria":114,"MatchCriteriaID":484,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"B620311B-34A3-48A6-82DF-6F078D7A4493",{"Vulnerable":4,"Criteria":117,"MatchCriteriaID":486,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3",{"Operator":27,"Negate":27,"Nodes":488},[489],{"Operator":378,"Negate":27,"CPEMatch":490},[491,494,497,501],{"Vulnerable":4,"Criteria":120,"MatchCriteriaID":492,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":493,"VersionEndIncluding":27},"632B24FA-F2D6-42B0-87C7-7F142E15EFC7","2.2.0-1.13.3",{"Vulnerable":4,"Criteria":123,"MatchCriteriaID":495,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":496,"VersionEndIncluding":27},"0AD20FA7-737F-47C0-B2AC-735438253AA9","1.10.10",{"Vulnerable":4,"Criteria":123,"MatchCriteriaID":498,"VersionStartExcluding":27,"VersionStartIncluding":499,"VersionEndExcluding":500,"VersionEndIncluding":27},"5E5AE03E-3AC4-4439-9D0D-45E097B2552C","1.10.11","1.11.9",{"Vulnerable":4,"Criteria":123,"MatchCriteriaID":502,"VersionStartExcluding":27,"VersionStartIncluding":503,"VersionEndExcluding":504,"VersionEndIncluding":27},"E2F3078E-08E0-4C76-A7A3-A93B953BEDD5","1.11.10","1.12.1",{"Operator":27,"Negate":27,"Nodes":506},[507],{"Operator":378,"Negate":27,"CPEMatch":508},[509,511],{"Vulnerable":4,"Criteria":128,"MatchCriteriaID":510,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"D100F7CE-FC64-4CC6-852A-6136D72DA419",{"Vulnerable":4,"Criteria":131,"MatchCriteriaID":512,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"97A4B8DF-58DA-4AB6-A1F9-331B36409BA3",{"Operator":27,"Negate":27,"Nodes":514},[515],{"Operator":378,"Negate":27,"CPEMatch":516},[517,519,521,523],{"Vulnerable":4,"Criteria":136,"MatchCriteriaID":518,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B",{"Vulnerable":4,"Criteria":139,"MatchCriteriaID":520,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D",{"Vulnerable":4,"Criteria":142,"MatchCriteriaID":522,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"07C312A0-CD2C-4B9C-B064-6409B25C278F",{"Vulnerable":4,"Criteria":145,"MatchCriteriaID":524,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"CD783B0C-9246-47D9-A937-6144FE8BFF0F",{"Operator":27,"Negate":27,"Nodes":526},[527],{"Operator":378,"Negate":27,"CPEMatch":528},[529,531,533,535],{"Vulnerable":4,"Criteria":150,"MatchCriteriaID":530,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"2DCFB2E7-D769-4365-9B99-952907563749",{"Vulnerable":4,"Criteria":153,"MatchCriteriaID":532,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"3909E337-F1FC-45C8-A120-EEBDBFB0E4D0",{"Vulnerable":4,"Criteria":156,"MatchCriteriaID":534,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"934D6CB3-E159-40F4-8E5B-CDDDD824CAA0",{"Vulnerable":4,"Criteria":159,"MatchCriteriaID":536,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"82C0FD9D-6117-40DE-9386-7327867F9615",[],[539,546],{"id":540,"eventType":541,"eventTime":542,"details":543,"label":544,"color":545},"fc7c22d3-2ccd-4fc0-92fb-9e5750d1d0ce","LOW_EPSS_DELTA","2025-11-19T04:06:30.908477+00:00","Daily EPSS score decreased by 0.290 on 2023-12-30","EPSS Score Decreased","green",{"id":547,"eventType":548,"eventTime":549,"details":550,"label":551,"color":552},"b6c43145-3e9a-465d-9770-2a1b94551310","HIGH_EPSS_DELTA","2025-11-22T04:06:19.031035+00:00","Daily EPSS score increased by 0.290 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":554,"version":33},1793199476331,{"score":556,"band":42,"action":557,"scoredAt":558},74,"Patch now","2026-10-28T06:45:31.126589+00:00"]