crun vulnerabilities (Alpine)
7 vulnerabilities.
-
crunAlpine Crun: crun: /dev/null symlink follow during stdio reopen allows host bind-mount write and chown 5.6 Medium -
crunAlpine Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs 5.6 Medium -
crunAlpine Crun: crun: rootful krun with passt executes container payload as host root 7.8 High -
crunAlpine crun follows rootfs /dev symlink while creating default devices 5.1 Medium -
crunAlpine Crun incorrectly parses `crun exec` option `-u`, leading to privilege escalation 0.0 None -
crunAlpine .krun_config.json symlink attack creates or overwrites file on the host in crun 8.5 High -
crunAlpine Important: container-tools:rhel8 security, bug fix, and enhancement update 7.5 High