Viewing profile — uvuv

A critical vulnerability chain in Azure Cosmos DB enabled full read and write access to every Cosmos DB database.

Definitely not secure. The author did a great job explaining container runtimes in basic terms, but there's a lot of security features missing. Mainly: * Reducing the container's c…

That's an option, an actually what LXD does. It's better then just chrooting, though in the case of this vulnerability even if docker-tar entered the mount NS, the exploit will sti…

Hi, OP here. You're correct on the symlink point, they're the reason chrooting is needed, as they caused several vulnerabilities in Docker and Podman cp in the past. The good news …

A PoC for CVE-2019-14271, which can be exploited by a malicious container to gain root code execution on the host.

They're created using https://www.draw.io/