Last week, Snyk, announced multiple CVEs affecting Docker, containerd, AWS EKS, Red Hat, Ubuntu, and hundreds of products shipping runc or buildkit. I'll explain what's going on and how I see the risk in these vulnerabilities, and maybe we'll go down memory lane with a history of container breakout bugs.
Runc
CVE-2024-21626
BuildKit
CVE-2024-23650
CVE-2024-23651
CVE-2024-23652
CVE-2024-23653
Moby
CVE-2024-2455
🗞️ Sign up for my weekly newsletter for the latest on upcoming guests and what I'm releasing: https://www.bretfisher.com/newsletter/
Topics
=====
Snyk "Leaky Vessels" CVE-2024-21626 https://snyk.io/blog/cve-2024-21626-r...
Docker Security Advisory https://www.docker.com/blog/docker-se...
NVD CVE https://nvd.nist.gov/vuln/detail/CVE-...
Runc https://github.com/opencontainers/run...
The Secure Developer Podcast episode deep dive https://www.devseccon.com/the-secure-...
Bret Fisher
=========
/ bretfisher
/ bretefisher
https://www.bretfisher.com
Join my Community 🤜🤛
================
💌 Weekly newsletter on upcoming guests and stuff I'm working on: https://www.bretfisher.com/newsletter/
💬 Join the discussion on our Discord chat server / discord
👨🏫 Coupons for my Docker and Kubernetes courses https://www.bretfisher.com/courses/
🎙️ Podcast of this show https://www.bretfisher.com/podcast
Show Music 🎵
==========
waiting music: Jakarta - Bonsaye https://www.epidemicsound.com/track/Y...
intro music: I Need A Remedy (Instrumental Version) - Of Men And Wolves https://www.epidemicsound.com/track/z...
outro music: Electric Ballroom - Quesa https://www.epidemicsound.com/track/K...
Watch video Docker & Kubernetes container breakout security bug CVE-2024-21626 (Stream 253) online, duration hours minute second in high quality that is uploaded to the channel Bret Fisher Docker and DevOps 01 January 1970. Share the link to the video on social media so that your subscribers and friends will also watch this video. This video clip has been viewed 2,824 times and liked it 59 visitors.