Advisories · Technology
containers crun.
Every CVE that names containers crun among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.6 Medium
Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs
- containers crun
- Red Hat Hardened Images
- Path traversal
- CVSS 5.1 Medium
crun follows rootfs /dev symlink while creating default devices
- containers crun
- CWE-61
- CVSS 0.0 None
Crun incorrectly parses `crun exec` option `-u`, leading to privilege escalation
- containers crun
- Privilege escalation
- CVSS 8.5 High
.krun_config.json symlink attack creates or overwrites file on the host in crun
- containers crun
- Path traversal