Logo
componentcrun
Name
crun
Version
1.24
Type
library
Description
-
Licenses
GPL-2.0+ (crun binary)LGPL-2.1+ (libcrun)
PURL
-
CPE
cpe:2.3:a:crun_project:crun:1.24:-:*:*:*:*:*:*

Other Versions#


Project
Branch
Version
2025.02.x
1.18.2

Vulnerabilities#


Name
Analysis
Description
Exploitable
crun is an open source OCI Container Runtime fully written in C. In versions 1.19 through 1.26, the `crun exec` option `-u` (`--user`) is incorrectly parsed. The value `1` is interpreted as UID 0 and GID 0 when it should have been UID 1 and GID 0. The process thus runs with higher privileges than expected. Version 1.27 patches the issue.