CVE-2025-31133

一、漏洞信息
 漏洞编号：[CVE-2025-31133](https://nvd.nist.gov/vuln/detail/CVE-2025-31133)
 漏洞归属组件：[buildah](https://gitee.com/src-openeuler/buildah)
 漏洞归属的版本：1.26.1,1.34.1
 CVSS V4.0分值：
  BaseScore：7.3 High
  Vector：CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
 漏洞简述：
  This vulnerability exploits race conditions in runc s masked paths implementation by replacing /dev/null with a symlink to a procfs file, allowing container breakout and host access. The attack requires custom mount configurations in the container and attacker-controlled mount source paths.
 漏洞公开时间：2025-11-07 03:15:41
 漏洞创建时间：2025-11-12 13:02:09
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2025-31133
<details>
<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
|  | https://bugs.mageia.org/show_bug.cgi?id=34719 |  |
|  | https://security-tracker.debian.org/tracker/CVE-2025-31133 |  |
|  | https://errata.almalinux.org/8/ALSA-2025-21232.html |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-52881 |  |
|  | https://access.redhat.com/errata/RHSA-2025:19927 |  |
|  | https://github.com/opencontainers/runc |  |
|  | https://github.com/advisories/GHSA-9493-h29p-rfm2 |  |
|  | https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2820 |  |
|  | http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-31133 |  |
|  | https://advisory.echohq.com/cve/CVE-2025-31133 |  |
|  | https://github.com/opencontainers/runc/commit/1a30a8f3d921acbbb6a4bb7e99da2c05f8d48522 |  |
|  | https://www.cve.org/CVERecord?id=CVE-2025-31133 |  |
|  | https://access.redhat.com/errata/RHSA-2025:20957 |  |
|  | https://github.com/opencontainers/runc/commit/8476df83b534a2522b878c0507b3491def48db9f |  |
|  | https://linux.oracle.com/errata/ELSA-2025-20957.html |  |
|  | https://github.com/opencontainers/runc/security/advisories/GHSA-9493-h29p-rfm2 |  |
|  | https://github.com/opencontainers/runc/commit/db19bbed5348847da433faa9d69e9f90192bfa64 |  |
|  | https://errata.almalinux.org/9/ALSA-2025-20957.html |  |
|  | https://www.mend.io/vulnerability-database/CVE-2025-31133 |  |
|  | https://www.openwall.com/lists/oss-security/2025/11/05/3 |  |
|  | https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=2404705 |  |
|  | https://access.redhat.com/security/cve/CVE-2025-31133 |  |
|  | https://github.com/opencontainers/runc/commit/5d7b2424072449872d1cd0c937f2ca25f418eb66 |  |
|  | https://linux.oracle.com/cve/CVE-2025-31133.html |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-52565 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-31133 |  |
|  | https://access.redhat.com/errata/RHSA-2025:21232 |  |
|  | https://advisories.mageia.org/MGASA-2025-0271.html |  |
|  | https://linux.oracle.com/errata/ELSA-2025-19927.html |  |
|  | https://errata.almalinux.org/9/ALSA-2025-19927.html |  |

</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  七彩瞬析开源风险感知平台
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源  |
| ------- | -------- | ------- | -------- | --------- |
|  |  | https://github.com/opencontainers/runc/commit/1a30a8f3d921acbbb6a4bb7e99da2c05f8d48522 |  | github_advisory |
|  |  | https://github.com/opencontainers/runc/commit/8476df83b534a2522b878c0507b3491def48db9f |  | github_advisory |
|  |  | https://github.com/opencontainers/runc/commit/db19bbed5348847da433faa9d69e9f90192bfa64 |  | github_advisory |
|  |  | https://github.com/opencontainers/runc/commit/5d7b2424072449872d1cd0c937f2ca25f418eb66 |  | github_advisory |

</details>
 
二、漏洞分析结构反馈
 影响性分析说明：
  
 openEuler评分：
   
 受影响版本排查(受影响/不受影响)：
  1.master:
2.openEuler-20.03-LTS-SP4:
3.openEuler-22.03-LTS-SP3(1.26.1):
4.openEuler-22.03-LTS-SP4(1.26.1):
5.openEuler-24.03-LTS:
6.openEuler-24.03-LTS-Next(1.34.1):
7.openEuler-24.03-LTS-SP1(1.34.1):
8.openEuler-24.03-LTS-SP2(1.34.1):

修复是否涉及abi变化(是/否)：
  1.master:
2.openEuler-20.03-LTS-SP4:
3.openEuler-22.03-LTS-SP3(1.26.1):
4.openEuler-22.03-LTS-SP4(1.26.1):
5.openEuler-24.03-LTS:
6.openEuler-24.03-LTS-Next(1.34.1):
7.openEuler-24.03-LTS-SP1(1.34.1):
8.openEuler-24.03-LTS-SP2(1.34.1):

原因说明：
  1.master:
2.openEuler-20.03-LTS-SP4:
3.openEuler-22.03-LTS-SP3(1.26.1):
4.openEuler-22.03-LTS-SP4(1.26.1):
5.openEuler-24.03-LTS:
6.openEuler-24.03-LTS-Next(1.34.1):
7.openEuler-24.03-LTS-SP1(1.34.1):
8.openEuler-24.03-LTS-SP2(1.34.1):

src-openEuler/buildah
关闭

内容风险标识

评论 (2)

src-openEuler/buildah关闭 .gitee-modal { width: 500px !important; }

内容风险标识

CVE-2025-31133

评论 (2)

搜索帮助

src-openEuler/buildah
关闭