Arbitrary Code Execution Vulnerability in Apache Mesos by Docker Image Manipulation

CVE-2019-0204

Summary

A vulnerability exists in certain versions of Apache Mesos that allows a malicious actor to exploit a crafted Docker image running as the root user. By overwriting the init helper binary of the container runtime or the command executor, an attacker can achieve root-level code execution on the host system. This represents a significant security risk as it may allow further compromise of the environment and access to sensitive information.

References