c/security · by BlanK0@lemmy.ml · 2yLeaky Vessels flaws allow hackers to escape Docker, runc containers https://www.bleepingcomputer.com/news/security/leaky-vessels-flaws-allow-hackers-to-escape-docker-runc-containers/9 points · 5 comments · view on lemmy.world
5 Comments
Oisteink@feddit.nl · 1 pts · 2y
What are the hackers doing in my container in the first place? And how did they drop to shell?
BlanK0@lemmy.ml · 1 pts · 2y
Maybe if you try to run fishy apps on containers then the hacker can exploit out of the container. I guess that's a possible scenario 🤔
Oisteink@feddit.nl · 1 pts · 2y
Possibly - so if I keep staying clear of fishy apps I’d be fine.
Does this affect lxc/d as welll?
BlanK0@lemmy.ml · 2 pts · 2y
It affects mainly docker and kubernets containers. I did a little research and apparently docker isn't based of lxc/lxd anymore, so I suppose that it doesn't affect those. Although I'm not sure what kubernets is based off
MaienM@sopuli.xyz · 4 pts · 2y
Kubernetes and docker both use containerd, which in turn uses runc which is what the vulnerability is in.