runc vulnerabilities (Azure Linux)
10 vulnerabilities.
-
runcAzure Linux github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files 5.5 Medium -
runcAzure Linux runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations 3.3 Low -
runcAzure Linux runc: LSM labels can be bypassed with malicious config using dummy procfs files 7.3 High -
runcAzure Linux Cri-o: cri-o path traversal in log handling functions allows arbitrary unmounting 6.6 Medium -
runcAzure Linux Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile 8.6 High -
runcAzure Linux Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos) 6.5 Medium -
runcAzure Linux Buildah: buildah allows arbitrary directory mount 7.8 High -
runcAzure Linux Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library 5.4 Medium -
runcAzure Linux runc can be confused to create empty files/directories on the host 3.6 Low -
runcAzure Linux Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads 7.5 High