{"vulnerability": "cve-2019-14271", "sightings": [{"uuid": "5dfb7f8c-dbc4-403d-b64d-37e471eebbde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-14271", "type": "seen", "source": "https://gist.github.com/namishelex01/c45e91ffc78335e7a096670758f310e6", "content": "", "creation_timestamp": "2025-12-17T18:58:48.000000Z"}, {"uuid": "0815618f-83cf-4804-b890-d164b06b09af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-14271", "type": "seen", "source": "https://t.me/sec_devops/268", "content": "Container Breakouts\n\n\u0421\u0435\u0440\u0438\u044f \u0441\u0442\u0430\u0442\u0435\u0439, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u0430\u044f \u0442\u043e\u043c\u0443, \u043a\u0430\u043a \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0432\u044b\u0445\u043e\u0434 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430. \u041e\u0431 \u044d\u0442\u043e\u0439 \u0443\u0433\u0440\u043e\u0437\u0435 \u0447\u0430\u0441\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0443\u0441\u043b\u044b\u0448\u0430\u0442\u044c \u043e\u0442 \u043c\u0430\u0440\u043a\u0435\u0442\u043e\u043b\u043e\u0433\u043e\u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u043f\u043e Container Runtime Security, \u043d\u043e \u0432\u0440\u0435\u043c\u044f \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u0442\u044c\u0441\u044f, \u043a\u0430\u043a \u044d\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435.\n\nPart 1: Access to root directory of the Host\nPart 2: Privileged Container\nPart 3: Docker Socket\n\n\u0422\u0430\u043a\u0436\u0435 \u0430\u0432\u0442\u043e\u0440 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u043f\u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0441 CVE-2019-5736, CVE-2019-14271, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u043e \u0441\u0442\u0430\u0442\u044c\u0435\u0439 \"Abusing Privileged and Unprivileged Linux Containers \"\n\n\u0414\u043b\u044f \u0442\u043e\u0433\u043e, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u0445\u043e\u0434\u0430 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430, Clint Gibler \u043d\u0430\u043f\u0438\u0441\u0430\u043b \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u0435\u0440\u0435\u0447\u0435\u043d\u044c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n#docker #ops #attack", "creation_timestamp": "2020-10-21T16:14:44.000000Z"}, {"uuid": "d13aec4a-3782-4197-ab42-d62a1658ef24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-14271", "type": "published-proof-of-concept", "source": "https://t.me/SecLabNews/6265", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 Unit 42 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Palo Alto Networks \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 PoC-\u043a\u043e\u0434 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 Docker. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2019-14271 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0432 Docker \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u00abcp\u00bb (copy) \u0438 \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.     \n\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d PoC-\u043a\u043e\u0434 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Docker", "creation_timestamp": "2019-11-20T15:23:45.000000Z"}, {"uuid": "74956af4-4b4a-4b94-bdd7-fd5d0726fbec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-14271", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/8233", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2019-14271_Exploit*\nGithub: https://github.com/iridium-soda/CVE-2019-14271_Exploit", "creation_timestamp": "2026-07-31T16:00:04.457578Z"}, {"uuid": "85018e3f-0490-421a-8f70-2aaa632e331a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-14271", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/8233", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2019-14271_Exploit*\nGithub: https://github.com/iridium-soda/CVE-2019-14271_Exploit", "creation_timestamp": "2026-08-01T00:00:28.568994Z"}, {"uuid": "4dc0db25-529d-4059-984f-2cd2c7c666ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-14271", "type": "seen", "source": "https://t.me/CVEhub/8233", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2019-14271_Exploit*\nGithub: https://github.com/iridium-soda/CVE-2019-14271_Exploit", "creation_timestamp": "2026-07-29T12:00:49.481045Z"}, {"uuid": "b0c403a8-d2c4-4f9c-bd6e-620242bab3f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-14271", "type": "seen", "source": "https://t.me/CVEhub/8233", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2019-14271_Exploit*\nGithub: https://github.com/iridium-soda/CVE-2019-14271_Exploit", "creation_timestamp": "2026-07-30T00:01:21.029708Z"}, {"uuid": "6813f558-9f21-403d-abd6-503b90797d95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-14271", "type": "seen", "source": "https://t.me/hacking_Attack/11443", "content": "Run ./metarget appv list to see vulnerable scenes related to cloud native applications supported currently.  Note:  Before deploying application vulnerable scenes, you should install Docker and Kubernetes firstly. You can use Metarget to install Docker and Kubernetes.  \n2.4.1 Case: DVWA\n  Run:  ./metarget appv install dvwa  If the command above completes successfully, DVWA (https://github.com/digininja/DVWA) will be deployed as Deployment and Service resources in current Kubernetes.  Note:  You can specify --external option, then the service will be exposed as NodePort, so that you can visit it by IP of the host node.  By default, the type of service is ClusterIP.  \n2.5 Manage Vulnerable Cloud Native Target Cluster\n  Developing, currently not supported.  \n3 Installation\n  \n3.1 Requirements\n    Ubuntu 16.04 or 18.04  Python >= 3.5  pip3    \n3.2 From Source\n  Clone the repository and install requirements:  git clone https://github.com/brant-ruan/metarget.git\ncd metarget/\npip install -r requirements.txt  Begin to use Metarget and construct vulnerable scenes. For example:  ./metarget cnv install cve-2019-5736  \n3.3 From PyPI\n  Currently unsupported.  \n4 Scene List\n  \n4.1 Vulnerable Scenes Related to Cloud Native Components\n    Name  Class  Type  CVSS 3.x  Status      cve-2018-15664 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2018-15664.yaml)  docker  container_escape  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2018-15664)  \u2705      cve-2019-13139 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2019-13139.yaml)  docker  command_execution  8.4 (https://nvd.nist.gov/vuln/detail/CVE-2019-13139)  \u2705      cve-2019-14271 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2019-14271.yaml)  docker  container_escape  9.8 (https://nvd.nist.gov/vuln/detail/CVE-2019-14271)  \u2705      cve-2020-15257 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2020-15257.yaml)  docker/containerd  container_escape  5.2 (https://nvd.nist.gov/vuln/detail/CVE-2020-15257)  \u2705      cve-2019-5736 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2019-5736.yaml)  docker/runc  container_escape  8.6 (https://nvd.nist.gov/vuln/detail/CVE-2019-5736)  \u2705      cve-2017-1002101 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2017-1002101.yaml)  kubernetes  container_escape  9.6 (https://nvd.nist.gov/vuln/detail/CVE-2017-1002101)  \u2705      cve-2018-1002105 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2018-1002105.yaml)  kubernetes  privilege_escalation  9.8 (https://nvd.nist.gov/vuln/detail/CVE-2018-1002105)  \u2705      cve-2019-11253 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2019-11253.yaml)  kubernetes  denial_of_service  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2019-11253)  \u2705      cve-2019-9512 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2019-9512.yaml)  kubernetes  denial_of_service  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2019-9512)  \u2705      cve-2019-9514 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2019-9514.yaml)  kubernetes  denial_of_service  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2019-9514)  \u2705      cve-2020-8554 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2020-8554.yaml)  kubernetes  man_in_the_middle  5.0 (https://nvd.nist.gov/vuln/detail/CVE-2020-8554)  \u2705      cve-2020-8557 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2020-8557.yaml)  kubernetes  denial_of_service  5.5 (https://nvd.nist.gov/vuln/detail/CVE-2020-8557)  \u2705      cve-2020-8558 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2020-8558.yaml)  kubernetes  exposure_of_service  8.8 (https://nvd.nist.gov/vuln/detail/CVE-2020-8558)  \u2705      cve-2016-5195 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kernel/cve-2016-5195.yaml)  kernel", "creation_timestamp": "2026-09-01T20:02:38.975963Z"}, {"uuid": "786331f7-d9d6-4926-b6e7-6fd12a818780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-14271", "type": "seen", "source": "https://t.me/hacking_Attack/11443", "content": "Run ./metarget appv list to see vulnerable scenes related to cloud native applications supported currently.  Note:  Before deploying application vulnerable scenes, you should install Docker and Kubernetes firstly. You can use Metarget to install Docker and Kubernetes.  \n2.4.1 Case: DVWA\n  Run:  ./metarget appv install dvwa  If the command above completes successfully, DVWA (https://github.com/digininja/DVWA) will be deployed as Deployment and Service resources in current Kubernetes.  Note:  You can specify --external option, then the service will be exposed as NodePort, so that you can visit it by IP of the host node.  By default, the type of service is ClusterIP.  \n2.5 Manage Vulnerable Cloud Native Target Cluster\n  Developing, currently not supported.  \n3 Installation\n  \n3.1 Requirements\n    Ubuntu 16.04 or 18.04  Python >= 3.5  pip3    \n3.2 From Source\n  Clone the repository and install requirements:  git clone https://github.com/brant-ruan/metarget.git\ncd metarget/\npip install -r requirements.txt  Begin to use Metarget and construct vulnerable scenes. For example:  ./metarget cnv install cve-2019-5736  \n3.3 From PyPI\n  Currently unsupported.  \n4 Scene List\n  \n4.1 Vulnerable Scenes Related to Cloud Native Components\n    Name  Class  Type  CVSS 3.x  Status      cve-2018-15664 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2018-15664.yaml)  docker  container_escape  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2018-15664)  \u2705      cve-2019-13139 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2019-13139.yaml)  docker  command_execution  8.4 (https://nvd.nist.gov/vuln/detail/CVE-2019-13139)  \u2705      cve-2019-14271 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2019-14271.yaml)  docker  container_escape  9.8 (https://nvd.nist.gov/vuln/detail/CVE-2019-14271)  \u2705      cve-2020-15257 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2020-15257.yaml)  docker/containerd  container_escape  5.2 (https://nvd.nist.gov/vuln/detail/CVE-2020-15257)  \u2705      cve-2019-5736 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/docker/cve-2019-5736.yaml)  docker/runc  container_escape  8.6 (https://nvd.nist.gov/vuln/detail/CVE-2019-5736)  \u2705      cve-2017-1002101 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2017-1002101.yaml)  kubernetes  container_escape  9.6 (https://nvd.nist.gov/vuln/detail/CVE-2017-1002101)  \u2705      cve-2018-1002105 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2018-1002105.yaml)  kubernetes  privilege_escalation  9.8 (https://nvd.nist.gov/vuln/detail/CVE-2018-1002105)  \u2705      cve-2019-11253 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2019-11253.yaml)  kubernetes  denial_of_service  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2019-11253)  \u2705      cve-2019-9512 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2019-9512.yaml)  kubernetes  denial_of_service  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2019-9512)  \u2705      cve-2019-9514 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2019-9514.yaml)  kubernetes  denial_of_service  7.5 (https://nvd.nist.gov/vuln/detail/CVE-2019-9514)  \u2705      cve-2020-8554 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2020-8554.yaml)  kubernetes  man_in_the_middle  5.0 (https://nvd.nist.gov/vuln/detail/CVE-2020-8554)  \u2705      cve-2020-8557 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2020-8557.yaml)  kubernetes  denial_of_service  5.5 (https://nvd.nist.gov/vuln/detail/CVE-2020-8557)  \u2705      cve-2020-8558 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kubernetes/cve-2020-8558.yaml)  kubernetes  exposure_of_service  8.8 (https://nvd.nist.gov/vuln/detail/CVE-2020-8558)  \u2705      cve-2016-5195 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kernel/cve-2016-5195.yaml)  kernel", "creation_timestamp": "2026-09-02T01:03:14.900055Z"}]}