A vulnerability was found in crun up to 0.10.4 and classified as critical. This issue affects an unknown code of the file libcrun/linux.c of the component Image Handler. The manipulation with an unknown input leads to a link following vulnerability. Using CWE to declare the problem leads to CWE-59. The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

An issue was discovered in crun before 0.10.5. With a crafted image, it doesn't correctly check whether a target is a symlink, resulting in access to files outside of the container. This occurs in libcrun/linux.c and libcrun/chroot_realpath.c.

The weakness was shared 11/13/2019 (GitHub Repository). It is possible to read the advisory at github.com. The identification of this vulnerability is CVE-2019-18837 since 11/08/2019. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Technical details of the vulnerability are known, but there is no available exploit.

Upgrading to version 0.10.5 eliminates this vulnerability.

Productinfo

Name

• crun

Version

• 0.10.0
• 0.10.1
• 0.10.2
• 0.10.3
• 0.10.4

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion