[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fB6BZW9Fwjgbgv0o1aI9LcsnsNu3ghn725EA1tn-x7aU":3,"g5a-risk:CVE-2019-19921":241},{"success":4,"data":5,"meta":239},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":80,"references":81,"referencesCount":139,"weaknesses":140,"weaknessesCount":27,"isActivelyExploited":149,"cisaInfo":26,"otxData":26,"relatedBlogPosts":150,"seoMetadata":151,"configurations":176,"relatedVendorCves":237,"notableEvents":238},"CVE-2019-19921","What is CVE-2019-19921?","runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer\u002Frootfs_linux.go. To exploit this, an attacker must be able to spawn two containers with custom volume-mount configurations, and be able to run custom images. (This vulnerability does not affect Docker due to an implementation detail that happens to block the attack.)","runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer\u002Frootfs_linux.go. To exploit this, an attacke...","2020-02-12T15:15:12.21","2023-11-07T03:07:52.063",7,"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":22,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","HIGH","LOW","NONE","UNCHANGED",null,1,5.9,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":34,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":34,"Authentication":24,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:L\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",4.4,3.4,6.4,0.00433,[39,39,39,39,39,39,39],"High",[43,48,51,56,59,64,69,72,77],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"linuxfoundation","runc","*","cpe:2.3:a:linuxfoundation:runc:*:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":49,"criteria":50,"vulnerable":4},"1.0.0","cpe:2.3:a:linuxfoundation:runc:1.0.0:rc1:*:*:*:*:*:*",{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"debian","debian_linux","9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":52,"product":53,"version":57,"criteria":58,"vulnerable":4},"10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",{"vendor":60,"product":61,"version":62,"criteria":63,"vulnerable":4},"opensuse","leap","15.1","cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",{"vendor":65,"product":66,"version":67,"criteria":68,"vulnerable":4},"canonical","ubuntu_linux","18.04","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",{"vendor":65,"product":66,"version":70,"criteria":71,"vulnerable":4},"19.10","cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*",{"vendor":73,"product":74,"version":75,"criteria":76,"vulnerable":4},"redhat","openshift_container_platform","4.1","cpe:2.3:a:redhat:openshift_container_platform:4.1:*:*:*:*:*:*:*",{"vendor":73,"product":74,"version":78,"criteria":79,"vulnerable":4},"4.2","cpe:2.3:a:redhat:openshift_container_platform:4.2:*:*:*:*:*:*:*",9,[82,89,93,96,102,105,108,112,116,119,122,125,128,131,135],{"url":83,"source":84,"tags":85},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2020-02\u002Fmsg00018.html","Opensuse",[86,87,88],"Broken Link","Mailing List","Third Party Advisory",{"url":90,"source":91,"tags":92},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2020:0688","Red Hat",[88],{"url":94,"source":91,"tags":95},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2020:0695",[88],{"url":97,"source":98,"tags":99},"https:\u002F\u002Fgithub.com\u002Fopencontainers\u002Frunc\u002Fissues\u002F2197","GitHub",[100,101,88],"Issue Tracking","Patch",{"url":103,"source":98,"tags":104},"https:\u002F\u002Fgithub.com\u002Fopencontainers\u002Frunc\u002Fpull\u002F2190",[100,88],{"url":106,"source":98,"tags":107},"https:\u002F\u002Fgithub.com\u002Fopencontainers\u002Frunc\u002Freleases",[88],{"url":109,"source":110,"tags":111},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2023\u002F03\u002Fmsg00023.html","Debian",[],{"url":113,"source":114,"tags":115},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FANUGDBJ7NBUMSUFZUSKU3ZMQYZ2Z3STN\u002F","Fedoraproject",[],{"url":117,"source":114,"tags":118},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FDHGVGGMKGZSJ7YO67TGGPFEHBYMS63VF\u002F",[],{"url":120,"source":114,"tags":121},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FFNB2UEDIIJCRQW4WJLZOPQJZXCVSXMLD\u002F",[],{"url":123,"source":114,"tags":124},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FFYVE3GB4OG3BNT5DLQHYO4M5SXX33AQ5\u002F",[],{"url":126,"source":114,"tags":127},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FI6BF24VCZRFTYBTT3T7HDZUOTKOTNPLZ\u002F",[],{"url":129,"source":110,"tags":130},"https:\u002F\u002Fsecurity-tracker.debian.org\u002Ftracker\u002FCVE-2019-19921",[88],{"url":132,"source":133,"tags":134},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202003-21","Gentoo",[88],{"url":136,"source":137,"tags":138},"https:\u002F\u002Fusn.ubuntu.com\u002F4297-1\u002F","Ubuntu",[88],15,[141],{"id":142,"name":143,"description":144,"extendedDescription":145,"status":146,"abstraction":147,"structure":148},"CWE-706","Use of Incorrectly-Resolved Name or Reference","The product uses a name or reference to access a resource, but the name\u002Freference resolves to a resource that is outside of the intended control sphere.","","Incomplete","Class","Simple",false,[],{"title":152,"metaDescription":153,"keywords":154,"canonicalUrl":155,"structuredData":156},"What is CVE-2019-19921? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-19921, a high severity cyber security vulnerability from 2020. runc through 1.0.0-rc9 has Incorrect Access Control leading...","CVE-2019-19921, CVE-2019-19921 vulnerability, CVE-2019-19921 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, linuxfoundation security, debian security, opensuse security, canonical security, redhat security, runc vulnerability, debian_linux vulnerability, leap vulnerability","\u002Fwhat-is\u002Fcve-2019-19921",{"@context":157,"@type":158,"headline":152,"description":153,"datePublished":10,"dateModified":11,"author":159,"publisher":163,"about":167,"mainEntityOfPage":171,"articleSection":174,"keywords":175},"https:\u002F\u002Fschema.org","TechArticle",{"@type":160,"name":161,"url":162},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":160,"name":161,"url":162,"logo":164},{"@type":165,"url":166},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":168,"name":6,"description":169,"additionalType":170},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":172,"@id":173},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-19921","Cybersecurity","CVE-2019-19921, CVE-2019-19921 vulnerability, CVE-2019-19921 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[177,211,221,229],{"Operator":26,"Negate":26,"Nodes":178},[179],{"Operator":180,"Negate":26,"CPEMatch":181},"OR",[182,185,187,190,193,196,199,202,205,208],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":183,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":184},"D522E8C1-E7F0-4A3D-AF68-6D962944A0E5","0.1.1",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":186,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"949172CC-EBB5-47F6-B987-207C802EED0F",{"Vulnerable":4,"Criteria":188,"MatchCriteriaID":189,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:linuxfoundation:runc:1.0.0:rc2:*:*:*:*:*:*","F6D87B50-2849-4F4D-A0F9-4F7EBA3C2647",{"Vulnerable":4,"Criteria":191,"MatchCriteriaID":192,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:linuxfoundation:runc:1.0.0:rc3:*:*:*:*:*:*","3E580E25-F94C-4DA4-8718-15D5F1C3ADAF",{"Vulnerable":4,"Criteria":194,"MatchCriteriaID":195,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:linuxfoundation:runc:1.0.0:rc4:*:*:*:*:*:*","FD565CE0-D9E9-4FD9-8998-8AC55030FAB7",{"Vulnerable":4,"Criteria":197,"MatchCriteriaID":198,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:linuxfoundation:runc:1.0.0:rc5:*:*:*:*:*:*","093326B1-448C-4E3B-886D-CAC8B6813BFF",{"Vulnerable":4,"Criteria":200,"MatchCriteriaID":201,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:linuxfoundation:runc:1.0.0:rc6:*:*:*:*:*:*","F672C421-789D-4F21-B483-DA3EB251BA1D",{"Vulnerable":4,"Criteria":203,"MatchCriteriaID":204,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:linuxfoundation:runc:1.0.0:rc7:*:*:*:*:*:*","E13C190A-D7CE-4204-8CEF-B7317D3FFBF9",{"Vulnerable":4,"Criteria":206,"MatchCriteriaID":207,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:linuxfoundation:runc:1.0.0:rc8:*:*:*:*:*:*","15AEA3E2-A82F-4562-AFE6-B83A767B94E7",{"Vulnerable":4,"Criteria":209,"MatchCriteriaID":210,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:linuxfoundation:runc:1.0.0:rc9:*:*:*:*:*:*","EB5109FF-7C41-477E-B817-F63F06D866C3",{"Operator":26,"Negate":26,"Nodes":212},[213],{"Operator":180,"Negate":26,"CPEMatch":214},[215,217,219],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":216,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":218,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":220,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B620311B-34A3-48A6-82DF-6F078D7A4493",{"Operator":26,"Negate":26,"Nodes":222},[223],{"Operator":180,"Negate":26,"CPEMatch":224},[225,227],{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":226,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D",{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":228,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A31C8344-3E02-4EB8-8BD8-4C84B7959624",{"Operator":26,"Negate":26,"Nodes":230},[231],{"Operator":180,"Negate":26,"CPEMatch":232},[233,235],{"Vulnerable":4,"Criteria":76,"MatchCriteriaID":234,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"064E7BDD-4EF0-4A0D-A38D-8C75BAFEDCEF",{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":236,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"4C85A84D-A70F-4B02-9E5D-CD9660ABF048",[],[],{"lastModified":11,"cacheTime":240,"version":32},1792375428824,{"score":242,"band":243,"action":244,"scoredAt":245},45,"Medium","Plan remediation","2026-10-16T06:47:55.10394+00:00"]