CVE-2023-28642

Aliases:GHSA-g2j6-57v7-gm8cGO-2023-1683
Advisory lineage Upstream: 0 Downstream: 14
Modified
Published: 29 Mar 2023, 18:15
Last modified:12 Feb 2025, 16:02

Vulnerability Summary

Overall Risk (default)
medium
31/100
CVSS Score
7.8 HIGH
v3.1 (nvd)
EPSS Score
0.01% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

29 Mar 2023, 18:15
Published
Vulnerability first disclosed
12 Feb 2025, 16:02
Last Modified
Vulnerability information updated

Description

runc is a CLI tool for spawning and running containers according to the OCI specification. It was found that AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration. This issue has been fixed in runc version 1.1.5, by prohibiting symlinked `/proc`. See PR #3785 for details. users are advised to upgrade. Users unable to upgrade should avoid using an untrusted container image.

CVSS Metrics

  • v3.1•MEDIUM•Score: 6.1CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
  • v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Trends

Current EPSS score: 0.01%• Percentile: 2%

Techniques & Countermeasures

  • CWE-281•Improper Preservation of Permissions

    The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.

  • CWE-59•Improper Link Resolution Before File Access ('Link Following')

    The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Affected Systems

  • github.com/opencontainers•runc

    < 1.1.5

  • linuxfoundation•runc

    < 1.1.5

  • opencontainers•runc

    < 1.1.5

References (6)