Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

GO-2025-4098 Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc

🗓️ 18 Nov 2025 15:44:15Reported by GoogleType 
osv
 osv🔗 osv.dev👁 4 Views

Container escape and denial of service from arbitrary write gadgets and procfs redirects in opencontainers runc.

Related
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: Automation Assets in IBM Cloud Pak for Integration is vulnerable to runc CVE-2025-52881
13 Mar 202616:57
–ibm
IBM Security Bulletins		Security Bulletin: Multiple Vulnerabilities in IBM API Connect
2 Mar 202616:48
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data
4 Mar 202615:08
–ibm
IBM Security Bulletins		Security Bulletin: Multiple Vulnerabilities for EDB Cloudpack for Data CP4D 5.3.1
1 Apr 202606:00
–ibm
Tenable Nessus		Amazon Linux 2023 : runc (ALAS2023-2025-1286)
11 Nov 202500:00
–nessus
Tenable Nessus		Amazon Linux 2 : runc, --advisory ALAS2DOCKER-2025-085 (ALASDOCKER-2025-085)
11 Nov 202500:00
–nessus
Tenable Nessus		Amazon Linux 2 : runc, --advisory ALAS2ECS-2025-082 (ALASECS-2025-082)
11 Nov 202500:00
–nessus
Tenable Nessus		Amazon Linux 2 : runc, --advisory ALAS2NITRO-ENCLAVES-2025-077 (ALASNITRO-ENCLAVES-2025-077)
11 Nov 202500:00
–nessus
Tenable Nessus		Alibaba Cloud Linux 3 : 0184: container-tools:an8 (ALINUX3-SA-2025:0184)
22 Nov 202500:00
–nessus
Tenable Nessus		Alibaba Cloud Linux 3 : 0003: container-tools:an8 (ALINUX3-SA-2026:0003)
7 Jan 202600:00
–nessus
Rows per page
SourceLink
githubwww.github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm
githubwww.github.com/opencontainers/runc/commit/3f925525b44d247e390e529e772a0dc0c0bc3557
githubwww.github.com/opencontainers/runc/commit/435cc81be6b79cdec73b4002c0dae549b2f6ae6d
githubwww.github.com/opencontainers/runc/commit/44a0fcf685db051c80b8c269812bb177f5802c58
githubwww.github.com/opencontainers/runc/commit/4b37cd93f86e72feac866442988b549b5b7bf3e6
githubwww.github.com/opencontainers/runc/commit/6fc191449109ea14bb7d61238f24a33fe08c651f
githubwww.github.com/opencontainers/runc/commit/77889b56db939c323d29d1130f28f9aea2edb544
githubwww.github.com/opencontainers/runc/commit/77d217c7c3775d8ca5af89e477e81568ef4572db
githubwww.github.com/opencontainers/runc/commit/a41366e74080fa9f26a2cd3544e2801449697322
githubwww.github.com/opencontainers/runc/commit/b3dd1bc562ed9996d1a0f249e056c16624046d28
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
04 Feb 2026 02:52Current
7High risk
Vulners AI Score7
CVSS 3.17.5
CVSS 47.3
EPSS0.00016
SSVC
container escapedenial of servicearbitrary write gadgetsprocfs redirectsopencontainers runclibrary
4