CVE-2021-21284 log

Severity Low
Remote No
Type Privilege escalation
In Docker before versions 9.03.15, 20.10.3 there is a vulnerability involving the --userns-remap option in which access to remapped root allows privilege escalation to real root. When using "--userns-remap", if the root user in the remapped namespace has access to the host filesystem they can modify files under "/var/lib/docker/<remapping>" that cause writing files with extended privileges. Versions 20.10.3 and 19.03.15 contain patches that prevent privilege escalation from remapped user.
Group Package Affected Fixed Severity Status Ticket
AVG-1528 docker 1:20.10.2-4 1:20.10.3-1 Medium Fixed
Date Advisory Group Package Severity Type
06 Feb 2021 ASA-202102-12 AVG-1528 docker Medium multiple issues