Aller au contenu
en Se connecter
7.3 Élevée

CVE-2025-31133 runc is a CLI tool for spawning and running containers according to the OCI specification

Description

runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7 and below, 1.3.0-rc.1 through 1.3.1, 1.4.0-rc.1 and 1.4.0-rc.2 files, runc would not perform sufficient verification that the source of the bind-mount (i.e., the container's /dev/null) was actually a real /dev/null inode when using the container's /dev/null to mask. This exposes two methods of attack: an arbitrary mount gadget, leading to host information disclosure, host denial of service, container escape, or a bypassing of maskedPaths. This issue is fixed in versions 1.2.8, 1.3.3 and 1.4.0-rc.3.

Produits et versions touchés

Produit Versions touchées Corrigé en
runc 1.4 1.4.0-rc.1 → 1.4.0-rc.3 Pas de correctif indiqué
runc 1.3 1.3.0-rc.1 → < 1.3.3 1.3.3
runc 1.2 premières → < 1.2.8 1.2.8

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de runc

Les 10 CVE de runc →
CVE-2026-41579 runc is a CLI tool for spawning and running containers according to the OCI specification 3.3 Faible CVE-2025-52881 runc is a CLI tool for spawning and running containers according to the OCI specification 7.3 Élevée CVE-2025-52565 runc is a CLI tool for spawning and running containers according to the OCI specification 8.4 Élevée CVE-2024-45310 runc is a CLI tool for spawning and running containers according to the OCI specification 3.6 Faible
Suivre cette CVE