Red Hat OpenShift Container Platform 4/crun
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| crun: Default inheritable capabilities for linux container should be empty | Red Hat OpenShift Container Platform 4/crun | Red Hat | Medium | No fix reported | |
| crun: crun: Privilege escalation due to incorrect parsing of the `--user` option | Red Hat OpenShift Container Platform 4/crun | Red Hat | Medium | No fix reported | |
| crun: crun: Arbitrary file creation/overwrite via symlink following | Red Hat Enterprise Linux 10/crunRed Hat Enterprise Linux 8/container-tools:rhel8/crun | Red Hat | High | No fix reported | |
| crun: crun: /dev/null symlink follow during stdio reopen allows host bind-mount write and chown | Red Hat Enterprise Linux 10/crunRed Hat Enterprise Linux 8/container-tools:rhel8/crun | Red Hat | Medium | No fix reported | |
| crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs | Red Hat Enterprise Linux 10/crunRed Hat Enterprise Linux 8/container-tools:rhel8/crun | Red Hat | Medium | No fix reported |