RunC Container Runtime Security Flaw Targets Kubernetes, Docker

Container runtime RunC fro Docker,Kubernetes and other container dependent programs is exploitable via attacker gaining access to the host. The open-source command-line tool is used for spawning and running containers. CVE-2019-5736

Now being reported in some Azure and AWS environments...

https://content.pivotal.io/blog/runc-vulnerability-secure-by-default-platform

https://www.bleepingcomputer.com/news/security/runc-vulnerability-gives-attackers-root-access-on-docker-kubernetes-hosts/

https://www.zdnet.com/article/doomsday-docker-security-hole-uncovered/

https://www.crn.com/news/security/new-security-flaw-targets-kubernetes-docker-runc-container-runtime

https://www.openwall.com/lists/oss-security/2019/02/11/2