WITHDRAWN: Libcontainer is affected by capabilities elevation in github.com/opencontainers/runc
(This report has been withdrawn with reason: "Does not affect Go code."). https://nvd.nist.gov/vuln/detail/CVE-2025-27612 lists https://github.com/opencontainers/runc/security/advisories/GHSA-f3fp-gc8g-vw66 which caused automation to flag as Go; the affected repo is https://github.com/youki-dev/youki (Rust).
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-27612US | —OT erhöht | — | ||
libcontainer is a library for container control. Prior to libcontainer 0.5.3, while creating a tenant container, the tenant builder accepts a list of capabilities to be added in th… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/opencontainers/runc/security/advisories/GHSA-f3fp-gc8g-vw66WEB
- https://github.com/youki-dev/youki/blob/9e63fa4da1672a78ca45100f3059a732784a5174/crates/libcontainer/src/container/tenant_builder.rs#L408WEB
- https://github.com/youki-dev/youki/commit/747e342d2026fbf3a395db3e2a491ebef00082f1FIX
- https://github.com/youki-dev/youki/security/advisories/GHSA-5w4j-f78p-4wh9WEB
- https://nvd.nist.gov/vuln/detail/CVE-2025-27612ADVISORY
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan