1318 matches found
UBUNTU-CVE-2025-31133
runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7 and below, 1.3.0-rc.1 through 1.3.1, 1.4.0-rc.1 and 1.4.0-rc.2 files, runc would not perform sufficient verification that the source of the bind-mount i.e., the container's /dev/null was...
USN-7851-1 runc-app, runc-stable vulnerabilities
Lei Wang and Li Fubang discovered that runC incorrectly handled masked paths. An attacker could possibly replace a container's /dev/null with a symlink to some other procfs file and possibly escape a container. CVE-2025-31133 Lei Wang and Li Fubang discovered that runC incorrectly handled the...
USN-7851-1: runC vulnerabilities
Lei Wang and Li Fubang discovered that runC incorrectly handled masked paths. An attacker could possibly replace a container's /dev/null with a symlink to some other procfs file and possibly escape a container. CVE-2025-31133 Lei Wang and Li Fubang discovered that runC incorrectly handled the...
PT-2025-45350
Name of the Vulnerable Software and Affected Versions runc versions 1.2.0 through 1.2.7 runc versions 1.3.0-rc.1 through 1.3.1 runc versions 1.4.0-rc.1 through 1.4.0-rc.2 Description An issue exists in the maskedPaths function where insufficient verification of the bind-mount source occurs when...
Security Bulletin: IBM Fusion HCI is vulnerable to potential container escapes
Summary An OpenShift or Fusion administrator, or potentially an attacker who gains access to a certain Storage Fusion containers, can gain access to underlying node linux capabilities, increasing the possibility of a container escape such as CVE-2022-0185. Vulnerability Details CVEID:CVE-2022-018...
Exploit for Incorrect Authorization in Oracle Mysql
RECORDS Only for reproduction of CVEs. Related Resources: -...
Docker Desktop 4.46.0 < 4.47.0 Container Escape
The version of Docker Desktop is prior to 4.47.0. It is therefore affected by a container escape vulnerability. In a hardened Docker environment, with Enhanced Container Isolation ECI https://docs.docker.com/enterprise/security/ hardened-desktop/enhanced-container-isolation/ enabled, an...
EUVD-2021-2523
Malware in sbrugna...
EUVD-2023-33680
Malicious code in bioql PyPI...
EUVD-2024-0459
Malicious code in bioql PyPI...
EUVD-2025-16091
Malicious code in bioql PyPI...
EUVD-2024-0867
Malicious code in bioql PyPI...
EUVD-2022-49539
Malicious code in bioql PyPI...
EUVD-2023-38884
Malicious code in bioql PyPI...
EUVD-2022-3809
Malicious code in bioql PyPI...
EUVD-2024-32860
Malicious code in bioql PyPI...
EUVD-2022-45227
Malicious code in bioql PyPI...
A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime to achieve a container escape and arbitrary code execution as root on the cluster node, where the malicious pod was deployed.
...
VulnCheck KEV: CVE-2023-2163
Incorrect verifier pruning in BPF in Linux Kernel =5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape...
Docker Desktop < 4.44.3 Container Escape
The version of Docker Desktop is prior to 4.44.3. It is therefore affected by a container escape vulnerability. The vulnerability allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 by default. This vulnerability occurs with...