crun vulnerabilities (Alpaquita)
5 vulnerabilities.
-
crunAlpaquita Crun: crun: /dev/null symlink follow during stdio reopen allows host bind-mount write and chown 5.6 Medium -
crunAlpaquita Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs 5.6 Medium -
crunAlpaquita Crun: crun: rootful krun with passt executes container payload as host root 7.8 High -
crunAlpaquita crun follows rootfs /dev symlink while creating default devices 5.1 Medium -
crunAlpaquita Crun incorrectly parses `crun exec` option `-u`, leading to privilege escalation 0.0 None