Red Hat Rkt vulnerabilities

3 CVEs affecting Red Hat Rkt, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-10147, published 2019-06-03.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-10145, published 2019-06-03. High severity, CVSS 7.7. EPSS: 0.5% chance of exploitation in the next 30 days. rkt through version 1.30.0 does not isolate processes in containers that are run with `rkt enter`. Processes run with `rkt enter` do not have seccomp filtering during stage 2 (the actual environment…
• CVE-2019-10144, published 2019-06-03. High severity, CVSS 7.7. EPSS: 0.5% chance of exploitation in the next 30 days. rkt through version 1.30.0 does not isolate processes in containers that are run with `rkt enter`. Processes run with `rkt enter` are given all capabilities during stage 2 (the actual environment in…
• CVE-2019-10147, published 2019-06-03. High severity, CVSS 7.7. EPSS: 0.5% chance of exploitation in the next 30 days. rkt through version 1.30.0 does not isolate processes in containers that are run with `rkt enter`. Processes run with `rkt enter` are not limited by cgroups during stage 2 (the actual environment in…