NRDAX-T0034 - Container Escape via Dependency

supply-chain · active · first seen 2019-01-01

provenance: Catalogued from public disclosure; not yet reproduced

mechanism

Container Escape via Dependency

instances (0)

chain	primitive	fidelity	origin	reproducer (bundle)	source

references

cve: CVE-2019-19921

cve: CVE-2026-43999

cve: CVE-2026-44009

ghsa: GHSA-6jcq-6546-qrrw

ghsa: GHSA-vmmj-pfw7-fjwp

related (supply-chain)

NRDAX-T0022 - Client Library Supply Chain Compromise active NRDAX-T0048 - Dependency Use-After-Free Corruption active NRDAX-T0098 - Guest Module Memory Corruption active NRDAX-T0140 - Log Injection RCE active NRDAX-T0170 - Network-Triggered Runtime DoS active NRDAX-T0296 - Template Injection RCE active NRDAX-T0337 - Unexploitable Dependency Vulnerability active NRDAX-T0344 - Uninitialized Memory Disclosure active

cite

https://nrdax.com/techniques/NRDAX-T0034

plain

NRDAX Registry. Technique NRDAX-T0034.

bibtex

@misc{nrdax_NRDAX_T0034,
  title = {Container Escape via Dependency (NRDAX-T0034)},
  howpublished = {NRDAX Registry},
  url = {https://nrdax.com/techniques/NRDAX-T0034},
}

json (csl)

{
  "id": "nrdax-NRDAX-T0034",
  "type": "dataset",
  "title": "Container Escape via Dependency (NRDAX-T0034)",
  "URL": "https://nrdax.com/techniques/NRDAX-T0034",
  "publisher": "NRDAX Registry"
}