Seems like a really serious vulnerability, any container attack or malicious image could take over a container host if there’s no hardening on the containers.
Seems like a really serious vulnerability, any container attack or malicious image could take over a container host if there’s no hardening on the containers.
Yes, the runc vulnerability affects both docker cli and podman cli.
Docker and Kubernetes use containerd, and Podman uses runc directly.
https://github.com/containerd/containerd/pull/9724
https://github.com/containers/podman/pull/21483
Do not run any untrusted images until the vulnerability is fixed, especially not as root.