Docker vulnerabilities

[flatcat8]

CVEs:

1. CVE-2019-6736 (runc)
2. CVE-2022-0847 (dirty ripe)
3. CVE-2021-21285 (resource consumption)
4. CVE-2014-9356 (directory traversal)
5. CVE-2019-14271 (improper initialization)

what are newer ones?

 

[Gwuzciq]

If docker is just a folder on a host machine with its own namespace, I wonder why there is a need for special docker exploits? Docker image is just a zip file that gets unpacked and all the binaries are run by the host.

 

[Gwuzciq]

Isn't it the case that all kernel exploits work?

 

[flatcat8]

Not looking for kernel exploits. Want docker exploits to run escape and get access to host