StackRadar

CVE-2023-25809

Low

Advisory

Published 30 Mar 2023In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
2.5
base score, highest
EPSS
0.003
25th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
274
of 17,781 indexed, latest versions
Container images
206
deployed by those charts
Fix available
1 of 1
affected package

rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc

Carried by container images the latest versions of 274 of 17,781 indexed charts deploy, on 206 images.

Affected packageAffected versionsFixed inImages
github.com/opencontainers/runcgolangv0.0.0-20161107232042-8779fa57eb4a, v0.0.0-20230719051532-82f18fe0e44a, v0.1.1, v1.0.0-rc2.0.20190611121236-6cc515888830+18 more1.1.5206
OSV records
GHSA-m8cg-xc2p-r3fc
Also known as
GO-2023-1682

Charts affected

274 by stars
ChartLatestAffected imagesRadar Score
trilliansigstoreVerified publisher0.3.171 of 5See more

trillian sigstore 0.3.17

1 of the 5 container images this version deploys carry CVE-2023-25809.

Container imageDigestPackageFixed in
gcr.io/trillian-opensource-ci/db_serverdigest-pinned2a685a38dd01
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

2,808
smarter-k3s-edgesmarterVerified publisher0.0.121 of 2See more

smarter-k3s-edge smarter 0.0.12

1 of the 2 container images this version deploys carry CVE-2023-25809.

Container imageDigestPackageFixed in
rancher/k3s:v1.25.3-k3s1eaa270df79cc
github.com/opencontainers/runc@v1.1.2
1.1.5

Open the chart page →

3,462
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2023-25809.

Container imageDigestPackageFixed in
helga09/my_sql_shoes:v1.1.1a03657d97897
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

7,574
redissoftonic0.3.01 of 2See more

redis softonic 0.3.0

1 of the 2 container images this version deploys carry CVE-2023-25809.

Container imageDigestPackageFixed in
library/redis:5.0fc5ecd863862
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

1,731
redis-high-availabilitysomeblackmagic1.3.101 of 3See more

redis-high-availability someblackmagic 1.3.10

1 of the 3 container images this version deploys carry CVE-2023-25809.

Container imageDigestPackageFixed in
bitnamilegacy/redis:7.0.8-debian-11-r0bf01d031ba8c
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

3,148
servicexssl-hep1.8.51 of 16See more

servicex ssl-hep 1.8.5

1 of the 16 container images this version deploys carry CVE-2023-25809.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2022.12.12-debian-11-r90f7c8ac484ac
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

66,266
allurestakaterVerified publisher1.0.11 of 1See more

allure stakater 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-25809.

Container imageDigestPackageFixed in
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
github.com/opencontainers/runc@v0.1.1
1.1.5

Open the chart page →

28,165
static-src-people-detector-appstatic-src-people-detector-chartVerified publisher1.5.51 of 6See more

static-src-people-detector-app static-src-people-detector-chart 1.5.5

1 of the 6 container images this version deploys carry CVE-2023-25809.

Container imageDigestPackageFixed in
library/mongo:4.4.18d23ec07162ca
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

13,646
freeradiussvtech-public-helm-charts0.1.51 of 4See more

freeradius svtech-public-helm-charts 0.1.5

1 of the 4 container images this version deploys carry CVE-2023-25809.

Container imageDigestPackageFixed in
library/mysql:8.2.0212fe73edca5
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

12,655
maxscalesvtech-public-helm-charts1.0.01 of 2See more

maxscale svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-25809.

Container imageDigestPackageFixed in
library/mysql:8.2.0212fe73edca5
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

5,841
explorersynapse0.2.161 of 6See more

explorer synapse 0.2.16

1 of the 6 container images this version deploys carry CVE-2023-25809.

Container imageDigestPackageFixed in
yandex/clickhouse-server:latest1cbf75aabe1e
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

8,518
taalhuizen-servicetaalhuizen-service1.0.01 of 3See more

taalhuizen-service taalhuizen-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-25809.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/taalhuizen-service-php:latest04f1b7f0d573
github.com/opencontainers/runc@v0.1.1
1.1.5

Open the chart page →

7,480
tensor_apptensor-app0.2.21 of 3See more

tensor_app tensor-app 0.2.2

1 of the 3 container images this version deploys carry CVE-2023-25809.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

17,461
vehicle-dashboardtest-vehi-dash0.1.01 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-25809.

Container imageDigestPackageFixed in
library/mongo:5.0.217c81758cb295
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

20,270
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.41 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2023-25809.

Container imageDigestPackageFixed in
pysga1996/redis:latest3af6d0c7db19
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

4,661
steamcmdthetredevVerified publisher1.0.91 of 1See more

steamcmd thetredev 1.0.9

1 of the 1 container images this version deploys carry CVE-2023-25809.

Container imageDigestPackageFixed in
ghcr.io/thetredev/steamcmd:srcds-20240309dbb0f042cb31
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

1,075
trouw-servicetrouw-service1.0.01 of 3See more

trouw-service trouw-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-25809.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/trouw-service-php:latestf745e2870692
github.com/opencontainers/runc@v0.1.1
1.1.5

Open the chart page →

7,510
phonebook-chartusuladams2Verified publisher0.2.11 of 3See more

phonebook-chart usuladams2 0.2.1

1 of the 3 container images this version deploys carry CVE-2023-25809.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

3,176
verhuis-serviceverhuis-service1.0.01 of 3See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-25809.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verhuis-service-php:latest66bbaf95a123
github.com/opencontainers/runc@v0.1.1
1.1.5

Open the chart page →

7,510
verzoekconversieserviceverzoekconversieservice1.0.01 of 3See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-25809.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekconversieservice-php:lateste918014fb8d3
github.com/opencontainers/runc@v0.1.1
1.1.5

Open the chart page →

7,528
verzoekregistratiecomponentverzoekregistratiecomponent1.1.01 of 4See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry CVE-2023-25809.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-php:latestc4f6c03af5d3
github.com/opencontainers/runc@v0.1.1
1.1.5

Open the chart page →

7,429
verzoektypecatalogusverzoektypecatalogus1.1.01 of 4See more

verzoektypecatalogus verzoektypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2023-25809.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoektypecatalogus-php:latest64f5eb7a398b
github.com/opencontainers/runc@v0.1.1
1.1.5

Open the chart page →

7,429
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2023-25809.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
github.com/opencontainers/runc@v0.1.1
1.1.5

Open the chart page →

7,552
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2023-25809.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

9,248

Container images carrying it

206 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/docker:23.0.1-dindd9a0fd8bdd15
github.com/opencontainers/runc@v1.1.3
1.1.5
1
library/ghost:5.79.083f7bf209844
github.com/opencontainers/runc@v1.1.0
1.1.5
1
library/mariadb:10.7.307e06f2e7ae9
github.com/opencontainers/runc@v1.0.1
1.1.5
1
library/mariadb:10.11.21c33370a599c
github.com/opencontainers/runc@v1.0.1
1.1.5
1
library/mariadb:10.8.2-focal490f01279be1
github.com/opencontainers/runc@v1.0.1
1.1.5
1
library/mariadb:10.79a48ac9f196f
github.com/opencontainers/runc@v1.0.1
1.1.5
1
library/mariadb:10.10.2bfc25a68e113
github.com/opencontainers/runc@v1.0.1
1.1.5
1
library/mariadb:10.6.15e22328f4d714
github.com/opencontainers/runc@v1.0.1
1.1.5
1
library/mariadb:10.9.4fbb8456ebdb1
github.com/opencontainers/runc@v1.0.1
1.1.5
1
library/mongo:5.0.14-focal50cae5081ab4
github.com/opencontainers/runc@v1.1.0
1.1.5
1
library/mongo:6.0.12646902910d6a
github.com/opencontainers/runc@v1.1.0
1.1.5
1
library/mongo:4.2699d652ed674
github.com/opencontainers/runc@v1.1.0
1.1.5
1
library/mongo:5.0.217c81758cb295
github.com/opencontainers/runc@v1.1.0
1.1.5
1
library/mongo:4.4.18d23ec07162ca
github.com/opencontainers/runc@v1.1.0
1.1.5
1
library/mysql:8.0.303c1aab708f6e
github.com/opencontainers/runc@v1.0.1
1.1.5
1
library/postgres:13.703652c675ae1
github.com/opencontainers/runc@v1.0.1
1.1.5
1
library/postgres:14.32d1e636f0778
github.com/opencontainers/runc@v1.0.1
1.1.5
1
library/postgres:13.11-bullseye5c265bf1fd30
github.com/opencontainers/runc@v1.1.0
1.1.5
1
library/postgres:15.38775adb39f0d
github.com/opencontainers/runc@v1.1.0
1.1.5
1
library/postgres:13.12ced3ba927f4c
github.com/opencontainers/runc@v1.1.0
1.1.5
1
library/postgres:14.6f565573d74ae
github.com/opencontainers/runc@v1.1.0
1.1.5
1
library/redis:7.0.4091a7b5de688
github.com/opencontainers/runc@v1.0.1
1.1.5
1
librenms/librenms:22.4.14f1f3d667cc7
github.com/opencontainers/runc@v1.0.3
1.1.5
1
linuxserver/cloud9:latest45c5fe102ff3
github.com/opencontainers/runc@v1.1.2
1.1.5
1
mesosphere/kommander-federation-utility-apiserver:v0.21.2f9b769c65e24
github.com/opencontainers/runc@v1.0.0-rc92
1.1.5
1
milvusdb/etcd:3.5.5-r2102aac62827b
github.com/opencontainers/runc@v1.1.0
1.1.5
1
moby/buildkit:v0.10.0c2aeafaed434
github.com/opencontainers/runc@v1.1.0
1.1.5
1
opencord/onos-classic-helm-utils:0.1.00d693ba85fd6
github.com/opencontainers/runc@v0.1.1
1.1.5
1
otel/opentelemetry-collector-contrib:0.46.0ba173aa85f3f
github.com/opencontainers/runc@v1.1.0
1.1.5
1
otel/opentelemetry-collector-contrib:0.63.1dfb3a55ea8c9
github.com/opencontainers/runc@v1.1.3
1.1.5
1
photoprism/photoprism:220629-jammy2954334adbda
github.com/opencontainers/runc@v1.1.2
1.1.5
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
github.com/opencontainers/runc@v0.1.1
1.1.5
1
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
github.com/opencontainers/runc@v1.1.3
1.1.5
1
postgis/postgis:11-2.5f479f6c3435e
github.com/opencontainers/runc@v1.0.1
1.1.5
1
pysga1996/redis:latest3af6d0c7db19
github.com/opencontainers/runc@v1.1.0
1.1.5
1
rancher/k3s:v1.28.2-k3s18c2599ecfca8
github.com/opencontainers/runc@v0.0.0-20230719051532-82f18fe0e44a
1.1.5
1
rancher/k3s:v1.25.3-k3s1eaa270df79cc
github.com/opencontainers/runc@v1.1.2
1.1.5
1
redislabs/redisearch:2.4.1433561794c5c8
github.com/opencontainers/runc@v1.0.1
1.1.5
1
rezachalak/bzen-mongo:1.0.034f694325191
github.com/opencontainers/runc@v1.1.0
1.1.5
1
robjuz/postgresql-nominatim:latest805c7bab76df
github.com/opencontainers/runc@v1.0.0-rc95
1.1.5
1
sstarcher/helm-exporter:0.5.011769d01ba35
github.com/opencontainers/runc@v0.1.1
1.1.5
1
thmmniii/fbs-runner:v1.27.186105349c1a3
github.com/opencontainers/runc@v1.1.3
1.1.5
1
yandex/clickhouse-server:latest1cbf75aabe1e
github.com/opencontainers/runc@v1.0.1
1.1.5
1
ygqygq2/mysql-exec-sql:latest54f30def1558
github.com/opencontainers/runc@v1.1.0
1.1.5
1
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
github.com/opencontainers/runc@v1.0.0-rc95
1.1.5
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller30ce73388ae5
github.com/opencontainers/runc@v0.1.1
1.1.5
1
gcr.io/knative-releases/knative.dev/serving/cmd/controllerb2cd45b8a8a4
github.com/opencontainers/runc@v0.1.1
1.1.5
1
gcr.io/ml-pipeline/mysql:5.7-debiandf28187b5455
github.com/opencontainers/runc@v1.0.1
1.1.5
1
ghcr.io/chaos-mesh/chaos-daemon:v2.5.1cf78fdf7403a
github.com/opencontainers/runc@v1.1.2
1.1.5
1
ghcr.io/chaos-mesh/chaos-dashboard:v2.5.1448cb346b12c
github.com/opencontainers/runc@v1.1.2
1.1.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.