Improper Input Validation

🗓️ 13 Nov 2025 06:52:57Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 5 Views

Improper input validation in runc enables mount manipulation via /dev/null, risking host disclosure, denial of service, container escape.

Reporter	Title	Published	Views	Family All 296
GithubExploit	Exploit for CVE-2025-31133	6 Nov 202512:57	–	githubexploit
GithubExploit	Exploit for Race Condition Enabling Link Following in Linuxfoundation Runc	12 May 202600:30	–	githubexploit
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which are vulnerable to CVEs.	24 Feb 202606:14	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data	4 Mar 202615:08	–	ibm
Tenable Nessus	Amazon Linux 2023 : runc (ALAS2023-2025-1286)	11 Nov 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : runc, --advisory ALAS2DOCKER-2025-085 (ALASDOCKER-2025-085)	11 Nov 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : runc, --advisory ALAS2ECS-2025-082 (ALASECS-2025-082)	11 Nov 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : runc, --advisory ALAS2NITRO-ENCLAVES-2025-077 (ALASNITRO-ENCLAVES-2025-077)	11 Nov 202500:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0184: container-tools:an8 (ALINUX3-SA-2025:0184)	22 Nov 202500:00	–	nessus
Tenable Nessus	AlmaLinux 9 : runc (ALSA-2025:19927)	10 Nov 202500:00	–	nessus

Vulners

Node

linuxfoundation runcMatch1.3.0-r2go

AND

linuxfoundation runcMatch1.3.0-r3go

AND

linuxfoundation runcMatch1.3.0-r1go

AND

linuxfoundation runcMatch1.3.0-r4go

AND

alpinelinux alpine_linuxMatch3.22

linuxfoundation runcMatch1.0.2-r0go

AND

linuxfoundation runcMatch1.1.3-r1go

AND

linuxfoundation runcMatch1.1.3-r0go

AND

linuxfoundation runcMatch1.2.0-r0go

AND

linuxfoundation runcMatch1.1.14-r0go

AND

linuxfoundation runcMatch1.1.12-r1go

AND

linuxfoundation runcMatch1.2.4-r1go

AND

linuxfoundation runcMatch1.1.5-r0go

AND

linuxfoundation runcMatch1.3.2-r1go

AND

linuxfoundation runcMatch1.2.3-r0go

AND

linuxfoundation runcMatch1.0.3-r0go

AND

linuxfoundation runcMatch1.1.12-r4go

AND

linuxfoundation runcMatch1.0.0_rc95-r1go

AND

linuxfoundation runcMatch1.1.10-r0go

AND

linuxfoundation runcMatch1.3.0-r0go

AND

linuxfoundation runcMatch1.1.15-r0go

AND

linuxfoundation runcMatch1.1.4-r4go

AND

linuxfoundation runcMatch1.1.5-r2go

AND

linuxfoundation runcMatch1.1.9-r2go

AND

linuxfoundation runcMatch1.0.0_rc95-r0go

AND

linuxfoundation runcMatch1.2.5-r0go

AND

linuxfoundation runcMatch1.1.8-r0go

AND

linuxfoundation runcMatch1.1.7-r0go

AND

linuxfoundation runcMatch1.3.1-r0go

AND

linuxfoundation runcMatch1.1.2-r0go

AND

linuxfoundation runcMatch1.1.4-r1go

AND

linuxfoundation runcMatch1.3.0-r3go

AND

linuxfoundation runcMatch1.2.2-r0go

AND

linuxfoundation runcMatch1.3.2-r0go

AND

linuxfoundation runcMatch1.0.0_rc10-r0go

AND

linuxfoundation runcMatch1.1.13-r0go

AND

linuxfoundation runcMatch1.3.0-r1go

AND

linuxfoundation runcMatch1.2.1-r0go

AND

linuxfoundation runcMatch1.1.12-r0go

AND

linuxfoundation runcMatch1.1.7-r2go

AND

linuxfoundation runcMatch1.1.13-r1go

AND

linuxfoundation runcMatch1.2.6-r1go

AND

linuxfoundation runcMatch1.1.4-r6go

AND

linuxfoundation runcMatch1.3.0-r2go

AND

linuxfoundation runcMatch1.2.6-r0go

AND

linuxfoundation runcMatch1.1.12-r2go

AND

linuxfoundation runcMatch1.0.0_rc10-r1go

AND

linuxfoundation runcMatch1.1.6-r0go

AND

linuxfoundation runcMatch1.1.0-r1go

AND

linuxfoundation runcMatch1.0.0_rc94-r0go

AND

linuxfoundation runcMatch1.1.4-r0go

AND

linuxfoundation runcMatch1.1.4-r5go

AND

linuxfoundation runcMatch1.0.1-r0go

AND

linuxfoundation runcMatch1.1.4-r2go

AND

linuxfoundation runcMatch1.1.8-r1go

AND

linuxfoundation runcMatch1.2.4-r0go

AND

linuxfoundation runcMatch1.1.0-r0go

AND

linuxfoundation runcMatch1.1.12-r3go

AND

linuxfoundation runcMatch1.0.0_rc93-r0go

AND

linuxfoundation runcMatch1.0.0-r0go

AND

linuxfoundation runcMatch1.1.7-r1go

AND

linuxfoundation runcMatch1.1.9-r1go

AND

linuxfoundation runcMatch1.1.9-r0go

AND

linuxfoundation runcMatch1.1.3-r2go

AND

linuxfoundation runcMatch1.1.1-r0go

AND

linuxfoundation runcMatch1.0.2-r1go

AND

linuxfoundation runcMatch1.1.1-r1go

AND

linuxfoundation runcMatch1.1.4-r3go

AND

alpinelinux alpine_linuxMatchedge

opencontainers github.com/opencontainers/runcRangev0.0.1–0.0.1go

opencontainers github.com/opencontainers/runcRangev1.3.0-rc.2–1.3.0-rc.2go

opencontainers github.com/opencontainers/runcRangev1.4.0-rc.1–1.4.0-rc.1go

Source	Link
secdb	www.secdb.alpinelinux.org/edge/community.yaml
secdb	www.secdb.alpinelinux.org/v3.22/community.yaml
github	www.github.com/opencontainers/runc/security/advisories/GHSA-9493-h29p-rfm2
github	www.github.com/opencontainers/runc/commit/db19bbed5348847da433faa9d69e9f90192bfa64
github	www.github.com/opencontainers/runc/commit/1a30a8f3d921acbbb6a4bb7e99da2c05f8d48522
github	www.github.com/opencontainers/runc/commit/8476df83b534a2522b878c0507b3491def48db9f
github	www.github.com/opencontainers/runc/commit/5d7b2424072449872d1cd0c937f2ca25f418eb66

27 Apr 2026 17:36Current

8High risk

Vulners AI Score8

CVSS 3.17.8

CVSS 47.3

EPSS0.00673

SSVC