github.com/opencontainers/runc vulnerabilities (Go)
17 vulnerabilities.
-
github.com/opencontainers/runcGo runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations 3.3 Low -
github.com/opencontainers/runcGo runc: LSM labels can be bypassed with malicious config using dummy procfs files 7.3 High -
github.com/opencontainers/runcGo container escape due to /dev/console mount and related races 8.4 High -
github.com/opencontainers/runcGo runc container escape via "masked path" abuse due to mount race conditions 7.3 High -
github.com/opencontainers/runcGo runc can be confused to create empty files/directories on the host 3.6 Low -
github.com/opencontainers/runcGo runc container breakout through process.cwd trickery and leaked fds 8.6 High -
github.com/opencontainers/runcGo rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc 5.0 Medium -
github.com/opencontainers/runcGo AppArmor bypass with symlinked /proc in runc 6.1 Medium -
github.com/opencontainers/runcGo Opencontainers runc Incorrect Authorization vulnerability 7.0 High -
github.com/opencontainers/runcGo Incorrect Default Permissions in runc 5.9 Medium -
github.com/opencontainers/runcGo devices resource list treated as a blacklist by default No score -
github.com/opencontainers/runcGo Overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration 6.0 Medium -
github.com/opencontainers/runcGo mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs 8.5 High -
github.com/opencontainers/runcGo opencontainers runc contains procfs race condition with a shared volume mount 7.0 High -
github.com/opencontainers/runcGo Incorrect Authorization in runc 7.5 High -
github.com/opencontainers/runcGo Information Exposure in RunC 6.4 Medium -
github.com/opencontainers/runcGo Privilege Elevation in runc 7.8 High