CVE:CVE-2019-5736
CNNVD:CNNVD-201902-316
Docker是美国Docker公司的一款开源的应用容器引擎。该产品支持在Linux系统上创建一个容器（轻量级虚拟机）并部署和运行应用程序，以及通过配置文件实现应用程序的自动化安装、部署和升级。
Docker 18.09.2之前版本和其他产品中的runc 1.0-rc6及之前版本中存在安全漏洞，该漏洞源于程序没有正确地处理文件描述符。攻击者可利用该漏洞覆盖主机runc的二进制文件并以root权限执行命令。
solution:Upgrade docker docker to a higher version than 18.09.2,and avoid the version (,18.09.2); Upgrade linuxfoundation runc to a higher version than 0.1.1,1.0.0:rc1,1.0.0:rc2,1.0.0:rc3,1.0.0:rc4,1.0.0:rc5,1.0.0:rc6,and avoid the version (,0.1.1],1.0.0:rc1,1.0.0:rc2,1.0.0:rc3,1.0.0:rc4,1.0.0:rc5,1.0.0:rc6; Upgrade redhat container_development_kit to a higher version than 3.7,and avoid the version 3.7; Upgrade redhat openshift to a higher version than 3.4,3.5,3.6,3.7,and avoid the version 3.4,3.5,3.6,3.7; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade google kubernetes_engine to a higher version than -; Upgrade linuxcontainers lxc to a higher version than 3.2.0,and avoid the version (,3.2.0); Upgrade hp onesphere to a higher version than -; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade apache mesos to a higher version than 1.4.3,1.5.3,1.6.2,1.7.2,and avoid the version [1.4.0,1.4.3),[1.5.0,1.5.3),[1.6.0,1.6.2),[1.7.0,1.7.2); Upgrade opensuse backports_sle to a higher version than 15.0,15.0:sp1,and avoid the version 15.0,15.0:sp1; Upgrade opensuse leap to a higher version than 15.0,15.1,42.3,and avoid the version 15.0,15.1,42.3; Upgrade d2iq kubernetes_engine to a higher version than 2.2.0-1.13.3,and avoid the version (,2.2.0-1.13.3); Upgrade d2iq dc/os to a higher version than 1.10.10,1.11.9,1.12.1,and avoid the version (,1.10.10),[1.10.11,1.11.9),[1.11.10,1.12.1); Upgrade fedoraproject fedora to a higher version than 29,30,and avoid the version 29,30; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,18.10,19.04,and avoid the version 16.04,18.04,18.10,19.04; Upgrade microfocus service_management_automation to a higher version than 2018.02,2018.05,2018.08,2018.11,and avoid the version 2018.02,2018.05,2018.08,2018.11