# CVE-2019-5736 and the Security Meaning of Privileged Containers

DevFeed: [CVE-2019-5736 and the Security Meaning of Privileged Containers](<https://devfeed.tech/articles/runtimes-and-the-curse-of-the-privileged-container-33947.md>)

Original publisher: [Read original article](<https://brauner.io/2019/02/12/privileged-containers.html>)

Author: Christian Brauner

Published: 2019-02-11T23:00:00Z

Content type: article

Language: en

Sources: [Personal blog of Christian Brauner](<https://devfeed.tech/sources/personal-blog-of-christian-brauner.md>)

Topics: [container](<https://devfeed.tech/topics/container.md>), [Containers](<https://devfeed.tech/topics/containers.md>), [vulnerability](<https://devfeed.tech/topics/vulnerability.md>), [Exploit](<https://devfeed.tech/topics/exploit.md>), [Security](<https://devfeed.tech/topics/security.md>), [implementation](<https://devfeed.tech/topics/implementation.md>)

Tags: [containers](<https://devfeed.tech/tags/containers.md>), [cve](<https://devfeed.tech/tags/cve.md>), [exploit](<https://devfeed.tech/tags/exploit.md>), [lxc](<https://devfeed.tech/tags/lxc.md>), [runc](<https://devfeed.tech/tags/runc.md>), [security](<https://devfeed.tech/tags/security.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

## AI overview

The article examines CVE-2019-5736, a vulnerability that could let a malicious container overwrite the host runc binary and gain root-level code execution. It then develops a more precise definition of privileged containers based on whether ID 0 has the same semantics inside and outside the container.

## Source excerpt

Introduction (CVE-2019-5736)