Tag

setuid

Safeguard articles tagged "setuid" — guides, analysis, and best practices for software supply chain and application security.

1 article

Container Security

CTF Writeup: Container SETUID Escape Techniques

A container-local root shell is not the flag. CVE-2019-5736 and CVE-2021-4034 both show how a SETUID binary inside a container can become a host compromise.

Jul 8, 20266 min read