Skip to content
OpenAdvisories

Vendor

opencontainers

11 known vulnerabilities.

Products

runc 10 distribution-spec 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.3
    CVE-2026-41579

    runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations

    runc is a CLI tool for spawning and running containers according to the OCI specification. In versions prior to 1.3.6, 1.4.0-rc.1, 1.4.0-rc.12, 1.5.0-rc.1, and 1.5.0-rc.1, when setting up the container rootfs, setupPtmx and setupDevSymlinks call os.Remove and…

    opencontainers runc runc github.com/opencontainers/runc Debian Ubuntu Alpine Go
  • Low 3.6
    CVE-2024-45310

    runc can be confused to create empty files/directories on the host

    runc is a CLI tool for spawning and running containers according to the OCI specification. runc 1.1.13 and earlier, as well as 1.2.0-rc2 and earlier, can be tricked into creating empty files or directories in arbitrary locations in the host filesystem by shar…

    opencontainers runc runc github.com/opencontainers/runc Debian Ubuntu Alpine Go
  • Low 3.0
    CVE-2021-41190

    Clarify Content-Type handling in OCI spec

    The OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content. In the OCI Distribution Specification version 1.0.0 and prior, the Content-Type header alone was used to determine the type of document during…

    opencontainers distribution-spec docker.io docker Ubuntu Alpine Go