A specifically crafted Docker image running under the root user can overwrite the init helper binary of the container runtime and/or the command execu...

参照URL

• advisory http://www.securityfocus.com/bid/107605
• advisory https://access.redhat.com/errata/RHSA-2019:3892
• web https://lists.apache.org/thread.html/b162dd624dc088cd634292f0402282a1d1d0ce853baeae8205bc033c%40%3Cdev.mesos.apache.org%3E