CVE:CVE-2023-27561
CNNVD:CNNVD-202303-277
runc是一款用于根据OCI规范生成和运行容器的CLI（命令行界面）工具。
runc 1.1.4版本及之前版本存在安全漏洞，该漏洞源于访问控制不正确。攻击者利用该漏洞可以升级权限。
solution:Upgrade linuxfoundation runc to a higher version than 1.1.5,and avoid the version (,1.1.5); Upgrade redhat openshift_container_platform to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat enterprise_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0