CVE:CVE-2019-19921
CNNVD:CNNVD-202002-314
runc是一款用于根据OCI规范生成和运行容器的CLI（命令行界面）工具。
runc 1.0.0-rc9及之前版本中存在安全漏洞，该漏洞源于不正确的访问控制。攻击者可利用该漏洞提升权限。
solution:Upgrade linuxfoundation runc to a higher version than 0.1.1,1.0.0:rc1,1.0.0:rc2,1.0.0:rc3,1.0.0:rc4,1.0.0:rc5,1.0.0:rc6,1.0.0:rc7,1.0.0:rc8,1.0.0:rc9,and avoid the version (,0.1.1],1.0.0:rc1,1.0.0:rc2,1.0.0:rc3,1.0.0:rc4,1.0.0:rc5,1.0.0:rc6,1.0.0:rc7,1.0.0:rc8,1.0.0:rc9; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade canonical ubuntu_linux to a higher version than 18.04,19.10,and avoid the version 18.04,19.10; Upgrade redhat openshift_container_platform to a higher version than 4.1,4.2,and avoid the version 4.1,4.2