QwikSec

Security Database

CVE

CWE

Training

CVE-2019-0204

Published: Mar 25, 2019

Modified: Aug 4, 2024

PUBLISHED

Description

A specifically crafted Docker image running under the root user can overwrite the init helper binary of the container runtime and/or the command executor in Apache Mesos versions pre-1.4.x, 1.4.0 to 1.4.2, 1.5.0 to 1.5.2, 1.6.0 to 1.6.1, and 1.7.0 to 1.7.1. A malicious actor can therefore gain root-level code execution on the host.

Vendor	Product	Versions
Apache	Apache Mesos	affected `pre-1.4.x` affected `1.4.0 to 1.4.2` affected `1.5.0 to 1.5.2` affected `1.6.0 to 1.6.1` affected `1.7.0 to 1.7.1`

References

[mesos-dev] 20190323 CVE-2019-0204: Some Mesos components can be overwritten making arbitrary code execution possible.

mailing-list

x_refsource_MLIST

vdb-entry

x_refsource_BID

vendor-advisory

x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.