UpHeron
All vulnerabilities

Servers and applications

CVE-2021-43784

Overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration

Severity
Medium 5.0
Published
6 Dec 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
1.0.3
Also known as
GHSA-v95c-p5hm-xq8f
Sources
NVD, Project advisories (GitHub)

Description

runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc, netlink is used internally as a serialization system for specifying the relevant container configuration to the `C` portion of the code (responsible for the based namespace setup of containers). In all versions of runc prior to 1.0.3, the encoder did not handle the possibility of an…

Affected software

SoftwareAffected versions
runcServers and applications · cpe:a:linuxfoundation:runc
  • Every version before 1.0.3
runcServers and applications · github:opencontainers/runc
  • Every version before 1.0.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-43784
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-43784
  • GitHub Advisory Database https://github.com/advisories/GHSA-v95c-p5hm-xq8f
  • github.com https://github.com/opencontainers/runc/security/advisories/GHSA-v95c-p5hm-xq8f