Vulnerability details
CVE-2025-24965
containers crun
.krun_config.json symlink attack creates or overwrites file on the host in crun
CVSS 4.0
8.5High
Official description
crun is an open source OCI Container Runtime fully written in C. In affected versions A malicious container image could trick the krun handler into escaping the root filesystem, allowing file creation or modification on the host. No special permissions are needed, only the ability for the current user to write to the target file. The problem is fixed in crun 1.20 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 8.5High | 4.0 | CVEProject cvelistV5 (CNA) (GitHub_M) | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| containers | crun | < 1.20 | CVEProject cvelistV5 (CNA) |
References and advisories
3- https://github.com/containers/crun/security/advisories/GHSA-f42g-r5jj-qh4j x_refsource_CONFIRM
- https://github.com/containers/crun/commit/0aec82c2b686f0b1793deed43b46524fe2e8b5a7 x_refsource_MISC
- https://github.com/containers/crun/releases/tag/1.20 x_refsource_MISC
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-02-19
- Last updated
- 2025-02-19
- State
- Published
- Assigner (CNA)
- GitHub_M
Exploit prediction (EPSS)
0.57%
Probability of exploitation in 30 days
47.7%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- Proof of concept
- Technical impact
- Total
Weaknesses (CWE)
- CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')