[{"CVE":"CVE-2020-16845","severity":"moderate","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1867099","bugzilla_description":"CVE-2020-16845 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24553","severity":"moderate","public_date":"2020-08-01T00:00:00Z","advisories":[],"bugzilla":"1874857","bugzilla_description":"CVE-2020-24553 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2019-19921","severity":"moderate","public_date":"2019-12-21T00:00:00Z","advisories":["RHSA-2020:1650","RHSA-2020:1485","RHSA-2020:0695","RHSA-2020:0942","RHSA-2020:0688"],"bugzilla":"1796107","bugzilla_description":"CVE-2019-19921 runc: volume mount race condition with shared mounts leads to information leak/integrity manipulation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-41","affected_packages":["runc-0:1.0.0-66.rc8.el7_7","runc-0:1.0.0-63.rc8.rhaos4.1.git3cbe540.el8_0","runc-0:1.0.0-66.rc10.rhaos4.3.el7_8","container-tools:rhel8-8020020200324071414.0d58ad57","runc-0:1.0.0-63.rc10.rhaos4.2.gitdc9208a.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19921.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2019-16884","severity":"moderate","public_date":"2019-09-22T00:00:00Z","advisories":["RHSA-2019:3940","RHSA-2020:1234","RHSA-2019:4269","RHBA-2020:1232","RHSA-2019:4074"],"bugzilla":"1757214","bugzilla_description":"CVE-2019-16884 runc: AppArmor/SELinux bypass with malicious image that specifies a volume at /proc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-41","affected_packages":["docker-2:1.13.1-161.git64e9980.el7_8","runc-0:1.0.0-62.rc8.rhaos4.1.git3cbe540.el8","runc-0:1.0.0-67.rc10.el7_8","container-tools:rhel8-8010020191126140055.c294d161","runc-0:1.0.0-63.rc8.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16884.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-5736","severity":"important","public_date":"2019-02-11T13:22:00Z","advisories":["RHSA-2019:0401","RHSA-2019:0303","RHSA-2019:0304","RHSA-2019:0975","RHSA-2019:0408"],"bugzilla":"1664908","bugzilla_description":"CVE-2019-5736 runc: Execution of malicious containers allows for container escape and access to host filesystem","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-672","affected_packages":["runc-0:1.0.0-59.dev.git2abd837.el7","container-tools:rhel8-8000020190416221845.2ffa3d27","docker-2:1.13.1-91.git07f3374.el7","docker-2:1.12.6-79.git5680db5.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5736.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2016-9962","severity":"important","public_date":"2017-01-11T00:00:00Z","advisories":["RHSA-2017:0116","RHSA-2017:0127","RHSA-2017:0123"],"bugzilla":"1409531","bugzilla_description":"CVE-2016-9962 docker: insecure opening of file-descriptor allows privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["runc-0:1.0.0-1.rc2.el7","docker-2:1.12.5-14.el7","docker-latest-0:1.12.5-14.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9962.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"7.5"}]