Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-ggww-wrxv-mmw2

Опубликовано: 10 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

A flaw was found in crun. When crun is built with libkrun and a container is started rootful with passt networking (krun.use_passt), crun can execute attacker-controlled payload from the container image with host root privileges. The issue is a regression in crun 1.29. It affects crun >= 1.29

A flaw was found in crun. When crun is built with libkrun and a container is started rootful with passt networking (krun.use_passt), crun can execute attacker-controlled payload from the container image with host root privileges. The issue is a regression in crun 1.29. It affects crun >= 1.29

EPSS

Процентиль: 1%
0.001
Низкий

7.8 High

CVSS3

Дефекты

CWE-269

Связанные уязвимости

CVSS3: 7.8
ubuntu
6 дней назад

(A flaw was found in crun. When crun is built with libkrun and a contai ...)

CVSS3: 7.8
redhat
7 дней назад

A flaw was found in crun. When crun is built with libkrun and a container is started rootful with passt networking (krun.use_passt), crun can execute attacker-controlled payload from the container image with host root privileges. The issue is a regression in crun 1.29. It affects crun >= 1.29

CVSS3: 7.8
nvd
6 дней назад

A flaw was found in crun. When crun is built with libkrun and a container is started rootful with passt networking (krun.use_passt), crun can execute attacker-controlled payload from the container image with host root privileges. The issue is a regression in crun 1.29. It affects crun >= 1.29

CVSS3: 7.8
debian
6 дней назад

A flaw was found in crun. When crun is built with libkrun and a contai ...

EPSS

Процентиль: 1%
0.001
Низкий

7.8 High

CVSS3

Дефекты

CWE-269