Expert disclosed an unpatched vulnerability in Microsoft Azure Functions that could be exploited to escape the Docker container hosting them. Microsoft determined that the vulnerability has no security impact on Function users as the Docker host itself is protected by a Hyper-V boundary. The vulnerability was discovered by cybersecurity researcher Paul Litvak from Intezer Lab. The experts discovered that the code is not segmented securely and could be abused to escape to access the underlying environment. Azure Functions can be triggered by HTTP requests and run for only a few minutes, just in time to handle the event.”]
Source: https://securityaffairs.co/wordpress/114061/hacking/azure-functions-escape-docker.html