opencontainers runc
10 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-41579 | < 1.3.6 ; >= 1.4.0-rc.1, < 1.4.3 ; >= 1.5.0-rc.1, < 1.5.0-rc.3 | runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations | LOW 3.3 | 0.2 % | ||
| CVE-2025-52881 | <= 1.2.7, < 1.2.8 ; <= 1.3.2, < 1.3.3 ; <= 1.4.0-rc.2, < 1.4.0-rc.3 | runc: LSM labels can be bypassed with malicious config using dummy procfs files | HIGH 7.3 | 0.8 % | ||
| CVE-2025-52565 | >= 1.0.0-rc3, < 1.2.8 ; >= 1.3.0-rc.1, < 1.3.3 ; >= 1.4.0-rc.1, < 1.4.0-rc.3 | container escape due to /dev/console mount and related races | HIGH 8.4 | 0.8 % | ||
| CVE-2025-31133 | < 1.2.8 ; >= 1.3.0-rc.1, < 1.3.3 ; >= 1.4.0-rc.1, <= 1.4.0-rc.3 | runc container escape via "masked path" abuse due to mount race conditions | HIGH 7.3 | 1.2 % | ||
| CVE-2024-45310 | < 1.1.14 ; >= 1.2.0-rc-1, < 1.2.0-rc.3 | runc can be confused to create empty files/directories on the host | LOW 3.6 | 0.3 % | ||
| CVE-2024-21626 | >=v1.0.0-rc93, < 1.1.12 | runc container breakout through process.cwd trickery and leaked fds | HIGH 8.6 | 19 % | ||
| CVE-2023-25809 | < 1.1.5 | rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc | MEDIUM 6.3 | 0.3 % | ||
| CVE-2023-28642 | < 1.1.5 | AppArmor bypass with symlinked /proc in runc | HIGH 7.8 | 0.3 % | ||
| CVE-2022-29162 | < 1.1.2 | Incorrect Default Permissions in runc | HIGH 7.8 | 0.4 % | ||
| CVE-2021-43784 | < 1.0.3 | Overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration | MEDIUM 6.0 | 1.8 % |