Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-18837
HistoryNov 13, 2019 - 8:15 p.m.

Code injection

2019-11-1320:15:00
PRIOn knowledge base
www.prio-n.com
3

8.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.3%

An issue was discovered in crun before 0.10.5. With a crafted image, it doesn’t correctly check whether a target is a symlink, resulting in access to files outside of the container. This occurs in libcrun/linux.c and libcrun/chroot_realpath.c.

CPENameOperatorVersion
crunlt0.10.5
fedoraeq30
fedoraeq31

8.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.3%