High
Security advisory
runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to /proc/self/exe.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2019-5736
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 09:06 UTC · Revision 1
Source evidence
runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to /proc/self/exe.
osv:CVE-2019-5736
Complete source record
{
"id": "bd3ed49d4cb2fa463140e50497c73717b114e15bb6acd6422189b042612a4422",
"url": "https://osv.dev/vulnerability/CVE-2019-5736",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2019-5736",
"summary": "runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to /proc/self/exe.",
"evidence": "osv:CVE-2019-5736",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2019-5736",
"aliases": [
"CVE-2019-5736"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/apache/mesos",
"type": "GIT",
"events": [
{
"introduced": "b3fd2e7ab26e118222fe18af4b92c53a3c01e6cc"
},
{
"fixed": "1fee9b5365bf2424e4768dc1d5209c6c78dfece6"
},
{
"introduced": "f7e3872b0359c6095f8eeaefe408cb7dcef5bb83"
},
{
"fixed": "b1dbba03af23b0222d11f2b7ae936d77ef42650d"
},
{
"introduced": "c7df5eadc075adcf525ea091f65786aaffb9b072"
},
{
"fixed": "a40aab9d0642b883c52504b1672878dc38438f36"
},
{
"introduced": "8419b870c571ac11825c883fa20ea3b7d4348d34"
},
{
"fixed": "58cc918e9acc2865bb07047d3d2dff156d1708b2"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:apache:mesos:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.4.0"
},
{
"fixed": "1.4.3"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:apache:mesos:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.5.0"
},
{
"fixed": "1.5.3"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:apache:mesos:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.6.0"
},
{
"fixed": "1.6.2"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:apache:mesos:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.7.0"
},
{
"fixed": "1.7.2"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"1.4.3-rc1",
"1.5.2-rc3",
"1.5.2",
"1.7.1-rc2",
"1.7.1",
"1.7.1-rc1",
"1.5.2-rc2",
"1.5.2-rc1",
"1.7.0-rc3",
"1.7.0",
"1.4.2-rc1",
"1.4.2",
"1.6.1-rc2",
"1.6.1",
"1.6.1-rc1",
"1.5.1-rc1",
"1.5.1",
"1.6.0-rc1",
"1.6.0",
"1.5.0-rc2",
"1.5.0",
"1.4.1-rc1",
"1.4.1",
"1.4.0-rc5",
"1.4.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-5736.json"
}
},
{
"ranges": [
{
"repo": "https://github.com/docker-archive/docker-ce",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "62479626f213818ba5b4565105a05277308587d5"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:docker:docker:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "18.09.2"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "62479626f213818ba5b4565105a05277308587d5"
}
],
"source": "REFERENCES_TAG",
"original_tag": "v18.09.2"
}
]
}
}
],
"versions": [
"v18.09.1",
"v18.09.1-rc1",
"v18.09.1-beta2",
"v18.09.1-beta1",
"v18.09.0",
"v18.09.0-rc1",
"v18.09.0-beta5",
"v18.09.0-beta3",
"v18.09.0-ce-beta1",
"v18.09.0-ce-tp6",
"v18.09.0-ce-tp5",
"v18.09.0-ce-tp4",
"v18.09.0-ce-tp3",
"v18.09.0-ce-tp0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-5736.json"
}
},
{
"ranges": [
{
"repo": "https://github.com/docker-archive/engine",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "eb137ff1765faeb29c2d99025bfd8ed41836dd06"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:docker:docker:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "18.09.2"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"v18.09.1",
"v18.09.1-rc1",
"v18.09.1-beta2",
"v18.09.1-beta1",
"v18.09.0",
"v18.09.0-rc1",
"v18.09.0-beta5",
"v18.09.0-beta3",
"v18.09.0-ce-tp6",
"v18.09.0-ce-beta1",
"v18.09.0-ce-tp5",
"v18.09.0-ce-tp4",
"v18.09.0-ce-tp3",
"v18.09.0-ce-tp0",
"v18.06.0-ce-rc1",
"docs-v1.12.0-rc4-2016-07-15",
"v0.7.2",
"v0.7.1",
"v0.7.0",
"v0.6.5",
"v0.5.0",
"v0.4.7",
"v0.4.5",
"v0.4.4",
"v0.4.2",
"v0.4.1",
"v0.3.2",
"v0.3.1",
"v0.3.0",
"v0.2.2",
"v0.2.1",
"v0.2.0",
"v0.1.8",
"v0.1.7",
"v0.1.6",
"v0.1.5",
"v0.1.4",
"v0.1.3",
"v0.1.2",
"v0.1.1",
"v0.1.0",
"upstream/0.1.3",
"0.0.3",
"upstream/0.1.2"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-5736.json"
}
},
{
"ranges": [
{
"repo": "https://github.com/lxc/lxc",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "65123ff553d7a5b5abcf3047410bcf50d25c9b55"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:linuxcontainers:lxc:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "3.2.0"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"lxc-3.1.0",
"lxc-3.0.0",
"lxc-3.0.0.beta4",
"lxc-3.0.0.beta3",
"lxc-3.0.0.beta2",
"lxc-3.0.0.beta1",
"lxc-2.1.0",
"lxc-2.0.0",
"lxc-2.0.0.rc15",
"lxc-2.0.0.rc14",
"lxc-2.0.0.rc13",
"lxc-2.0.0.rc12",
"lxc-2.0.0.rc11",
"lxc-2.0.0.rc10",
"lxc-2.0.0.rc9",
"lxc-2.0.0.rc8",
"lxc-2.0.0.rc7",
"lxc-2.0.0.rc6",
"lxc-2.0.0.rc5",
"lxc-2.0.0.rc4",
"lxc-2.0.0.rc3",
"lxc-2.0.0.rc2",
"lxc-2.0.0.rc1",
"lxc-2.0.0.beta2",
"lxc-2.0.0.beta1",
"lxc-1.1.0",
"lxc-1.1.0.rc4",
"lxc-1.1.0.rc3",
"lxc-1.1.0.rc2",
"lxc-1.1.0.rc1",
"lxc-1.1.0.alpha3",
"lxc-1.1.0.alpha2",
"lxc-1.1.0.alpha1",
"lxc-1.0.0",
"lxc-1.0.0.rc4",
"lxc-1.0.0.rc3",
"lxc-1.0.0.rc2",
"lxc-1.0.0.rc1",
"lxc-1.0.0.beta4",
"lxc-1.0.0.beta3",
"lxc-1.0.0.beta2",
"lxc-1.0.0.beta1",
"lxc-1.0.0.alpha3",
"lxc-1.0.0.alpha2",
"lxc-1.0.0.alpha1",
"lxc-0.9.0",
"lxc-0.9.0.rc1",
"lxc-0.9.0.alpha3",
"lxc-0.9.0.alpha2",
"lxc-0.9.0.alpha1",
"lxc-0.8.0",
"lxc-0.8.0-rc2",
"lxc-0.7.5",
"lxc-0.7.4",
"lxc-0.7.4-rc1",
"lxc-0.7.3",
"lxc-0.7.2",
"lxc-0.7.1",
"lxc-0.7.0",
"lxc-0.6.5",
"lxc_0_6_4",
"lxc_0_6_3",
"lxc_0_6_2",
"lxc_0_6_1",
"lxc_0_6_0",
"lxc_0_5_2",
"lxc_0_5_1",
"lxc_0_5_0",
"lxc_0_4_0",
"lxc_0_2_1",
"lxc_0_2_0",
"lxc_0_1_0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-5736.json"
}
},
{
"ranges": [
{
"repo": "https://github.com/moby/moby",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "eb137ff1765faeb29c2d99025bfd8ed41836dd06"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:docker:docker:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "18.09.2"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"v18.09.1",
"v18.09.1-rc1",
"v18.09.1-beta2",
"v18.09.1-beta1",
"v18.09.0",
"v18.09.0-rc1",
"v18.09.0-beta5",
"v18.09.0-beta3",
"v18.09.0-ce-tp6",
"v18.09.0-ce-beta1",
"v18.09.0-ce-tp5",
"v18.09.0-ce-tp4",
"v18.09.0-ce-tp3",
"v18.09.0-ce-tp0",
"v18.06.0-ce-rc1",
"docs-v1.12.0-rc4-2016-07-15",
"v0.7.2",
"v0.7.1",
"v0.7.0",
"v0.6.5",
"v0.5.0",
"v0.4.7",
"v0.4.5",
"v0.4.4",
"v0.4.2",
"v0.4.1",
"v0.3.2",
"v0.3.1",
"v0.3.0",
"v0.2.2",
"v0.2.1",
"v0.2.0",
"v0.1.8",
"v0.1.7",
"v0.1.6",
"v0.1.5",
"v0.1.4",
"v0.1.3",
"v0.1.2",
"v0.1.1",
"v0.1.0",
"upstream/0.1.3",
"0.0.3",
"upstream/0.1.2"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-5736.json"
}
},
{
"ranges": [
{
"repo": "https://github.com/opencontainers/runc",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"last_affected": "baf6536d6259209c3edfa2b22237af82942d3dfa"
},
{
"introduced": "04f275d4601ca7e5ff9460cec7f65e8dd15443ec"
},
{
"last_affected": "ccb5efd37fb7c86364786e9137e22948751de7ed"
},
{
"fixed": "0a8e4117e7f715d5fbeef398405813ce8e88558b"
},
{
"fixed": "6635b4f0c6af3810594d2770f662f34ddc15b40d"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:linuxfoundation:runc:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"last_affected": "0.1.1"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:linuxfoundation:runc:1.0.0:rc1:*:*:*:*:*:*",
"range": [
{
"introduced": "1.0.0-rc1"
},
{
"last_affected": "1.0.0-rc1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:linuxfoundation:runc:1.0.0:rc2:*:*:*:*:*:*",
"range": [
{
"introduced": "1.0.0-rc2"
},
{
"last_affected": "1.0.0-rc2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:linuxfoundation:runc:1.0.0:rc3:*:*:*:*:*:*",
"range": [
{
"introduced": "1.0.0-rc3"
},
{
"last_affected": "1.0.0-rc3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:linuxfoundation:runc:1.0.0:rc4:*:*:*:*:*:*",
"range": [
{
"introduced": "1.0.0-rc4"
},
{
"last_affected": "1.0.0-rc4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:linuxfoundation:runc:1.0.0:rc5:*:*:*:*:*:*",
"range": [
{
"introduced": "1.0.0-rc5"
},
{
"last_affected": "1.0.0-rc5"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:linuxfoundation:runc:1.0.0:rc6:*:*:*:*:*:*",
"range": [
{
"introduced": "1.0.0-rc6"
},
{
"last_affected": "1.0.0-rc6"
}
],
"source": "CPE_STRING"
},
{
"range": [
{
"fixed": "0a8e4117e7f715d5fbeef398405813ce8e88558b"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "6635b4f0c6af3810594d2770f662f34ddc15b40d"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"1.0.0-rc1",
"1.0.0-rc2",
"1.0.0-rc3",
"1.0.0-rc4",
"1.0.0-rc5",
"1.0.0-rc6",
"v0.1.1",
"v0.1.0",
"v0.0.8",
"v0.0.7",
"v0.0.6",
"v0.0.5",
"v0.0.4",
"v0.0.2",
"v0.0.3",
"v0.0.1"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-5736.json",
"vanir_signatures": [
{
"id": "CVE-2019-5736-1cffac28",
"digest": {
"threshold": 0.9,
"line_hashes": [
"206209469052802163709281360376397312675",
"48219882597669953983429687793407620753",
"213043235157353488768314210772726520178",
"251821556443359960608428361047721063429",
"93222659505421272286403399172694346479",
"107309039482126281655838517999257961732"
]
},
"source": "https://github.com/opencontainers/runc/commit/0a8e4117e7f715d5fbeef398405813ce8e88558b",
"target": {
"file": "libcontainer/nsenter/nsexec.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2019-5736-c45baaa5",
"digest": {
"length": 6892,
"function_hash": "43249958159973239119332662430070161949"
},
"source": "https://github.com/opencontainers/runc/commit/0a8e4117e7f715d5fbeef398405813ce8e88558b",
"target": {
"file": "libcontainer/nsenter/nsexec.c",
"function": "nsexec"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-24T14:06:54Z"
}
},
{
"ranges": [
{
"repo": "https://github.com/openshift/origin",
"type": "GIT",
"events": [
{
"introduced": "c4dd4cf368b6204571faacde702e624b930a5214"
},
{
"last_affected": "7ed6862914ef20e22280c51199be5071e354999f"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:redhat:openshift:3.6:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.6"
},
{
"last_affected": "3.6"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:redhat:openshift:3.7:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.7"
},
{
"last_affected": "3.7"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"3.6",
"3.7"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-5736.json"
}
}
],
"modified": "2026-10-24T14:06:54.292793693Z",
"provider": "osv",
"references": [
"https://lists.apache.org/thread.html/24e54e3c6b2259e3903b6b8fe26896ac649c481ea99c5739468c92a3%40%3Cdev.dlab.apache.org%3E",
"https://lists.apache.org/thread.html/a258757af84c5074dc7bf932622020fd4f60cef65a84290380386706%40%3Cuser.mesos.apache.org%3E",
"https://lists.apache.org/thread.html/a585f64d14c31ab393b90c5f17e41d9765a1a17eec63856ce750af46%40%3Cdev.dlab.apache.org%3E",
"https://lists.apache.org/thread.html/acacf018c12636e41667e94ac0a1e9244e887eef2debdd474640aa6e%40%3Cdev.dlab.apache.org%3E",
"https://lists.apache.org/thread.html/b162dd624dc088cd634292f0402282a1d1d0ce853baeae8205bc033c%40%3Cdev.mesos.apache.org%3E",
"https://lists.apache.org/thread.html/rc494623986d76593873ce5a40dd69cb3629400d10750d5d7e96b8587%40%3Cdev.dlab.apache.org%3E",
"https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DLC52IOJN6IQJWJ6CUI6AIUP6GVVG2QP/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EGZKRCKI3Y7FMADO2MENMT4TU24QGHFR/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWFJGIPYAAAMVSWWI3QWYXGA3ZBU2H4W/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6A4OSFM5GGOWW4ECELV5OHX2XRAUSPH/",
"https://access.redhat.com/errata/RHSA-2019:0303",
"https://access.redhat.com/errata/RHSA-2019:0304",
"https://access.redhat.com/errata/RHSA-2019:0401",
"https://access.redhat.com/errata/RHSA-2019:0408",
"https://access.redhat.com/errata/RHSA-2019:0975",
"https://access.redhat.com/security/cve/cve-2019-5736",
"https://access.redhat.com/security/vulnerabilities/runcescape",
"https://aws.amazon.com/security/security-bulletins/AWS-2019-002/",
"https://cloud.google.com/kubernetes-engine/docs/security-bulletins#february-11-2019-runc",
"https://github.com/docker/docker-ce/releases/tag/v18.09.2",
"https://github.com/rancher/runc-cve",
"https://kubernetes.io/blog/2019/02/11/runc-and-cve-2019-5736/",
"https://security.gentoo.org/glsa/202003-21",
"https://security.netapp.com/advisory/ntap-20190307-0008/",
"https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03410944",
"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190215-runc",
"https://usn.ubuntu.com/4048-1/",
"https://www.synology.com/security/advisory/Synology_SA_19_06",
"https://www.twistlock.com/2019/02/11/how-to-mitigate-cve-2019-5736-in-runc-and-docker/",
"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03913en_us",
"https://azure.microsoft.com/en-us/updates/cve-2019-5736-and-runc-vulnerability/",
"https://azure.microsoft.com/en-us/updates/iot-edge-fix-cve-2019-5736/",
"https://bugzilla.suse.com/show_bug.cgi?id=1121967",
"https://github.com/opencontainers/runc/commit/0a8e4117e7f715d5fbeef398405813ce8e88558b",
"https://github.com/opencontainers/runc/commit/6635b4f0c6af3810594d2770f662f34ddc15b40d",
"https://support.mesosphere.com/s/article/Known-Issue-Container-Runtime-Vulnerability-MSPH-2019-0003",
"https://www.openwall.com/lists/oss-security/2019/02/11/2",
"https://blog.dragonsector.pl/2019/02/cve-2019-5736-escape-from-docker-and.html",
"https://brauner.github.io/2019/02/12/privileged-containers.html",
"https://github.com/Frichetten/CVE-2019-5736-PoC",
"https://github.com/q3k/cve-2019-5736-poc",
"https://www.exploit-db.com/exploits/46359/",
"https://www.exploit-db.com/exploits/46369/"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:a:apache:mesos:*:*:*:*:*:*:*:*"
],
"vendor_product": "apache:mesos",
"extracted_events": [
{
"range": [
{
"introduced": "1.4.0"
},
{
"fixed": "1.4.3"
},
{
"introduced": "1.5.0"
},
{
"fixed": "1.5.3"
},
{
"introduced": "1.6.0"
},
{
"fixed": "1.6.2"
},
{
"introduced": "1.7.0"
},
{
"fixed": "1.7.2"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:o:d2iq:dc\\/os:*:*:*:*:*:*:*:*"
],
"vendor_product": "d2iq:dc/os",
"extracted_events": [
{
"range": [
{
"fixed": "1.10.10"
},
{
"introduced": "1.10.11"
},
{
"fixed": "1.11.9"
},
{
"introduced": "1.11.10"
},
{
"fixed": "1.12.1"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:d2iq:kubernetes_engine:*:*:*:*:*:*:*:*"
],
"vendor_product": "d2iq:kubernetes_engine",
"extracted_events": [
{
"range": [
{
"fixed": "2.2.0-1.13.3"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*"
],
"vendor_product": "canonical:ubuntu_linux",
"extracted_events": [
{
"range": [
{
"introduced": "16.04"
},
{
"last_affected": "16.04"
},
{
"introduced": "18.04"
},
{
"last_affected": "18.04"
},
{
"introduced": "18.10"
},
{
"last_affected": "18.10"
},
{
"introduced": "19.04"
},
{
"last_affected": "19.04"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*",
"cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*"
],
"vendor_product": "fedoraproject:fedora",
"extracted_events": [
{
"range": [
{
"introduced": "29"
},
{
"last_affected": "29"
},
{
"introduced": "30"
},
{
"last_affected": "30"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:microfocus:service_management_automation:2018.02:*:*:*:*:*:*:*",
"cpe:2.3:a:microfocus:service_management_automation:2018.05:*:*:*:*:*:*:*",
"cpe:2.3:a:microfocus:service_management_automation:2018.08:*:*:*:*:*:*:*",
"cpe:2.3:a:microfocus:service_management_automation:2018.11:*:*:*:*:*:*:*"
],
"vendor_product": "microfocus:service_management_automation",
"extracted_events": [
{
"range": [
{
"introduced": "2018.02"
},
{
"last_affected": "2018.02"
},
{
"introduced": "2018.05"
},
{
"last_affected": "2018.05"
},
{
"introduced": "2018.08"
},
{
"last_affected": "2018.08"
},
{
"introduced": "2018.11"
},
{
"last_affected": "2018.11"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:opensuse:backports_sle:15.0:-:*:*:*:*:*:*",
"cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:*"
],
"vendor_product": "opensuse:backports_sle",
"extracted_events": [
{
"range": [
{
"introduced": "15.0-NA"
},
{
"last_affected": "15.0-NA"
},
{
"introduced": "15.0-sp1"
},
{
"last_affected": "15.0-sp1"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*",
"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
"cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*"
],
"vendor_product": "opensuse:leap",
"extracted_events": [
{
"range": [
{
"introduced": "15.0"
},
{
"last_affected": "15.0"
},
{
"introduced": "15.1"
},
{
"last_affected": "15.1"
},
{
"introduced": "42.3"
},
{
"last_affected": "42.3"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:redhat:container_development_kit:3.7:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:container_development_kit",
"extracted_events": [
{
"range": [
{
"introduced": "3.7"
},
{
"last_affected": "3.7"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux",
"extracted_events": [
{
"range": [
{
"introduced": "8.0"
},
{
"last_affected": "8.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_server",
"extracted_events": [
{
"range": [
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:redhat:openshift:3.4:*:*:*:*:*:*:*",
"cpe:2.3:a:redhat:openshift:3.5:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:openshift",
"extracted_events": [
{
"range": [
{
"introduced": "3.4"
},
{
"last_affected": "3.4"
},
{
"introduced": "3.5"
},
{
"last_affected": "3.5"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2019-5736",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 443063,
"published_at": "2019-02-11T19:29:00.297+00:00"
}