crun vulnerabilities (Ubuntu)
7 vulnerabilities.
-
crunUbuntu Crun: crun: /dev/null symlink follow during stdio reopen allows host bind-mount write and chown 5.6 Medium -
crunUbuntu Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs 5.6 Medium -
crunUbuntu Crun: crun: rootful krun with passt executes container payload as host root 7.8 High -
crunUbuntu crun follows rootfs /dev symlink while creating default devices 5.1 Medium -
crunUbuntu Crun incorrectly parses `crun exec` option `-u`, leading to privilege escalation 0.0 None -
crunUbuntu .krun_config.json symlink attack creates or overwrites file on the host in crun 8.5 High -
crunUbuntu Important: container-tools:rhel8 security, bug fix, and enhancement update 7.5 High