Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-52881US | high7.5 | Exploit | ||
runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7, 1.3.2 and 1.4.0-rc.2, an attacker can trick runc into misdirecting wri… | ||||
02
references
External citations — patches, advisories, analysis.
- http://github.com/opencontainers/runc/commit/a41366e74080fa9f26a2cd3544e2801449697322WEB
- http://github.com/opencontainers/runc/commit/fdcc9d3cad2f85954a241ccb910a61aaa1ef47f3WEB
- https://github.com/opencontainers/runc/blob/v1.4.0-rc.2/RELEASES.mdWEB
- https://github.com/opencontainers/runc/commit/3f925525b44d247e390e529e772a0dc0c0bc3557FIX
- https://github.com/opencontainers/runc/commit/435cc81be6b79cdec73b4002c0dae549b2f6ae6dFIX
- https://github.com/opencontainers/runc/commit/44a0fcf685db051c80b8c269812bb177f5802c58FIX
- https://github.com/opencontainers/runc/commit/4b37cd93f86e72feac866442988b549b5b7bf3e6FIX
- https://github.com/opencontainers/runc/commit/6fc191449109ea14bb7d61238f24a33fe08c651fFIX
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan