CVE-2021-43784

Name of the Vulnerable Software and Affected Versions runc versions prior to 1.0.3

Description The issue is related to an integer overflow in the 16-bit length field for the byte array attribute type in the netlink serialization system used by runc. This allows an attacker with control over the container configuration to bypass namespace restrictions by adding a malicious netlink payload. The main users impacted are those who allow untrusted images with untrusted configurations to run on their machines, such as with shared cloud infrastructure.

Recommendations For versions prior to 1.0.3, update to version 1.0.3 to fix the bug. As a temporary workaround, consider disallowing untrusted namespace paths from your container configuration to minimize the risk of exploitation.