Bulkhead: Automated Semantic Detection and Remediation of Container Escape Vulnerabilities

Qiyuan Fan, Zhi Li, Junjie Li +3

Filesystem isolation in container ecosystems is often weakened by cross-boundary path misresolution, causing path traversal (PaTra) vulnerabilities. These vulnerabilities stem from…