crun vulnerabilities (openSUSE)
8 vulnerabilities.
-
crunopenSUSE Crun: crun: /dev/null symlink follow during stdio reopen allows host bind-mount write and chown 5.6 Medium -
crunopenSUSE Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs 5.6 Medium -
crunopenSUSE Crun: crun: rootful krun with passt executes container payload as host root 7.8 High -
crunopenSUSE crun follows rootfs /dev symlink while creating default devices 5.1 Medium -
crunopenSUSE Crun incorrectly parses `crun exec` option `-u`, leading to privilege escalation 0.0 None -
crunopenSUSE .krun_config.json symlink attack creates or overwrites file on the host in crun 8.5 High -
crunopenSUSE runc container breakout through process.cwd trickery and leaked fds 8.6 High -
crunopenSUSE Important: container-tools:rhel8 security, bug fix, and enhancement update 7.5 High