Crun Project

Crun

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2022-27650

  • EPSS 0.07%
  • Published 04.04.2022 20:15:10
  • Last modified 21.11.2024 06:56:06

A flaw was found in crun where containers were incorrectly started with non-empty default permissions. A vulnerability was found in Moby (Docker Engine) where containers were started incorrectly with non-empty inheritable Linux process capabilities. ...

8.6

CVE-2019-18837

  • EPSS 0.56%
  • Published 13.11.2019 20:15:10
  • Last modified 21.11.2024 04:33:40

An issue was discovered in crun before 0.10.5. With a crafted image, it doesn't correctly check whether a target is a symlink, resulting in access to files outside of the container. This occurs in libcrun/linux.c and libcrun/chroot_realpath.c.