Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-52881US | high7.5 | Exploit | ||
runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7, 1.3.2 and 1.4.0-rc.2, an attacker can trick runc into misdirecting wri… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- http://github.com/opencontainers/runc/commit/a41366e74080fa9f26a2cd3544e2801449697322WEB
- http://github.com/opencontainers/runc/commit/fdcc9d3cad2f85954a241ccb910a61aaa1ef47f3WEB
- https://github.com/opencontainers/runc/blob/v1.4.0-rc.2/RELEASES.mdWEB
- https://github.com/opencontainers/runc/commit/3f925525b44d247e390e529e772a0dc0c0bc3557FIX
- https://github.com/opencontainers/runc/commit/435cc81be6b79cdec73b4002c0dae549b2f6ae6dFIX
- https://github.com/opencontainers/runc/commit/44a0fcf685db051c80b8c269812bb177f5802c58FIX
- https://github.com/opencontainers/runc/commit/4b37cd93f86e72feac866442988b549b5b7bf3e6FIX
- https://github.com/opencontainers/runc/commit/6fc191449109ea14bb7d61238f24a33fe08c651fFIX
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan