PT0-001 · Question #76
In which of the following components is an exploited vulnerability MOST likely to affect multiple running application containers at once?
The correct answer is A. Common libraries. A vulnerability in a common library shared across multiple containers is most likely to simultaneously affect all containers that depend on it, since the library code executes within each container's runtime.
Question
In which of the following components is an exploited vulnerability MOST likely to affect multiple running application containers at once?
Options
- ACommon libraries
- BConfiguration files
- CSandbox escape
- DASLR bypass
How the community answered
(21 responses)- A57% (12)
- B24% (5)
- C14% (3)
- D5% (1)
Why each option
A vulnerability in a common library shared across multiple containers is most likely to simultaneously affect all containers that depend on it, since the library code executes within each container's runtime.
Common libraries - such as base image layers, shared native dependencies, or language runtime packages - are often mapped into or bundled across multiple running containers. Exploiting a vulnerability in such a library compromises every container that loads it, making it the single component with the broadest simultaneous blast radius across container workloads.
Configuration files are scoped to individual containers or services and do not create a shared code-execution surface that would simultaneously impact multiple independent containers.
A sandbox escape breaks out of one container to the underlying host rather than spreading laterally through a component shared between application containers at the same level.
An ASLR bypass defeats memory address randomization within a single process in one container and does not propagate to affect other containers running concurrently.
Concept tested: Shared library vulnerability impact across containers
Source: https://docs.docker.com/engine/security/
Topics
Community Discussion
No community discussion yet for this question.