GHSA-g2j6-57v7-gm8c
runc AppArmor bypass with symlinked /proc
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2023-28642
- Alias
- GO-2023-1683
- CVSS_V3
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Description
### Impact It was found that AppArmor, and potentially SELinux, can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration. ### Patches Fixed in runc v1.1.5, by prohibiting symlinked `/proc`: https://github.com/opencontainers/runc/pull/3785 This PR fixes CVE-2023-27561 as well. ### Workarounds Avoid using an untrusted container image.
Paquets affectés
| Paquet | Versions |
|---|---|
| Go · github.com/opencontainers/runc | introduced 0, fixed 1.1.5 |
Références
- https://github.com/opencontainers/runc/security/advisories/GHSA-g2j6-57v7-gm8c WEB
- https://nvd.nist.gov/vuln/detail/CVE-2023-28642 ADVISORY
- https://github.com/opencontainers/runc/pull/3785 WEB
- https://github.com/opencontainers/runc PACKAGE
- https://security.netapp.com/advisory/ntap-20241206-0005 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |