[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5iirYnI3ntL5nU5FjvWABIsWzRRe2k5QmrnhRuWPdWA":3,"g5a-risk:CVE-2023-27561":184},{"success":4,"data":5,"meta":181},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":26,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":59,"references":60,"referencesCount":117,"weaknesses":118,"weaknessesCount":27,"isActivelyExploited":127,"cisaInfo":26,"otxData":26,"relatedBlogPosts":128,"seoMetadata":129,"configurations":154,"relatedVendorCves":179,"notableEvents":180},"CVE-2023-27561","What is CVE-2023-27561?","runc through 1.1.4 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer\u002Frootfs_linux.go. To exploit this, an attacker must be able to spawn two containers with custom volume-mount configurations, and be able to run custom images. NOTE: this issue exists because of a CVE-2019-19921 regression.","runc through 1.1.4 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer\u002Frootfs_linux.go. To exploit this, an attacker mu...","2023-03-03T19:15:11.33","2024-12-06T14:15:19.037",7,"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":22,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","HIGH","LOW","NONE","UNCHANGED",null,1,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":22,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},0.00448,[33,33,33,33,33,33,33],"High",[37,42,47,51,54],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"linuxfoundation","runc","*","cpe:2.3:a:linuxfoundation:runc:*:*:*:*:*:*:*:*",{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"redhat","openshift_container_platform","4.0","cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*",{"vendor":43,"product":48,"version":49,"criteria":50,"vulnerable":4},"enterprise_linux","8.0","cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",{"vendor":43,"product":48,"version":52,"criteria":53,"vulnerable":4},"9.0","cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",{"vendor":55,"product":56,"version":57,"criteria":58,"vulnerable":4},"debian","debian_linux","10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",5,[61,67,71,74,79,83,86,89,92,95,97,99,101,103,105,107,109,111,113],{"url":62,"source":63,"tags":64},"https:\u002F\u002Fgist.github.com\u002FLiveOverflow\u002Fc937820b688922eb127fb760ce06dab9","GitHub",[65,66],"Exploit","Third Party Advisory",{"url":68,"source":63,"tags":69},"https:\u002F\u002Fgithub.com\u002Fopencontainers\u002Frunc\u002Fissues\u002F2197#issuecomment-1437617334",[70,66],"Issue Tracking",{"url":72,"source":63,"tags":73},"https:\u002F\u002Fgithub.com\u002Fopencontainers\u002Frunc\u002Fissues\u002F3751",[70,66],{"url":75,"source":76,"tags":77},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2023\u002F03\u002Fmsg00023.html","Debian",[78,66],"Mailing List",{"url":80,"source":81,"tags":82},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FANUGDBJ7NBUMSUFZUSKU3ZMQYZ2Z3STN\u002F","Fedoraproject",[],{"url":84,"source":81,"tags":85},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FDHGVGGMKGZSJ7YO67TGGPFEHBYMS63VF\u002F",[],{"url":87,"source":81,"tags":88},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FFNB2UEDIIJCRQW4WJLZOPQJZXCVSXMLD\u002F",[],{"url":90,"source":81,"tags":91},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FFYVE3GB4OG3BNT5DLQHYO4M5SXX33AQ5\u002F",[],{"url":93,"source":81,"tags":94},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FI6BF24VCZRFTYBTT3T7HDZUOTKOTNPLZ\u002F",[],{"url":62,"source":63,"tags":96},[65,66],{"url":68,"source":63,"tags":98},[70,66],{"url":72,"source":63,"tags":100},[70,66],{"url":75,"source":76,"tags":102},[78,66],{"url":80,"source":81,"tags":104},[],{"url":84,"source":81,"tags":106},[],{"url":87,"source":81,"tags":108},[],{"url":90,"source":81,"tags":110},[],{"url":93,"source":81,"tags":112},[],{"url":114,"source":115,"tags":116},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0004\u002F","Netapp",[],19,[119],{"id":120,"name":121,"description":122,"extendedDescription":123,"status":124,"abstraction":125,"structure":126},"CWE-706","Use of Incorrectly-Resolved Name or Reference","The product uses a name or reference to access a resource, but the name\u002Freference resolves to a resource that is outside of the intended control sphere.","","Incomplete","Class","Simple",false,[],{"title":130,"metaDescription":131,"keywords":132,"canonicalUrl":133,"structuredData":134},"What is CVE-2023-27561? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-27561, a high severity cyber security vulnerability from 2023. runc through 1.1.4 has Incorrect Access Control leading to ...","CVE-2023-27561, CVE-2023-27561 vulnerability, CVE-2023-27561 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, linuxfoundation security, redhat security, debian security, runc vulnerability, openshift_container_platform vulnerability, enterprise_linux vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2023-27561",{"@context":135,"@type":136,"headline":130,"description":131,"datePublished":10,"dateModified":11,"author":137,"publisher":141,"about":145,"mainEntityOfPage":149,"articleSection":152,"keywords":153},"https:\u002F\u002Fschema.org","TechArticle",{"@type":138,"name":139,"url":140},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":138,"name":139,"url":140,"logo":142},{"@type":143,"url":144},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":146,"name":6,"description":147,"additionalType":148},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":150,"@id":151},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-27561","Cybersecurity","CVE-2023-27561, CVE-2023-27561 vulnerability, CVE-2023-27561 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[155,163,173],{"Operator":26,"Negate":26,"Nodes":156},[157],{"Operator":158,"Negate":26,"CPEMatch":159},"OR",[160],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":161,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":162,"VersionEndIncluding":26},"AE0C5D34-F78A-4993-AC70-25A6606FC82B","1.1.5",{"Operator":26,"Negate":26,"Nodes":164},[165],{"Operator":158,"Negate":26,"CPEMatch":166},[167,169,171],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":168,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"932D137F-528B-4526-9A89-CD59FA1AB0FE",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":170,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F4CFF558-3C47-480D-A2F0-BABF26042943",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":172,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"7F6FB57C-2BC7-487C-96DD-132683AEB35D",{"Operator":26,"Negate":26,"Nodes":174},[175],{"Operator":158,"Negate":26,"CPEMatch":176},[177],{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":178,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",[],[],{"lastModified":11,"cacheTime":182,"version":183},1792375420187,"2.0",{"score":185,"band":186,"action":187,"scoredAt":188},41,"Medium","Plan remediation","2026-10-16T06:57:18.643747+00:00"]