PT-2023-3594 · Apparmor+11 · Apparmor+11
Ssst0N3
·
Publicado
2023-03-25
·
Atualizado
2025-08-08
·
CVE-2023-28642
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
runc versions prior to 1.1.5
Description
The issue is related to the incorrect handling of symbolic links before accessing a file, which allows an attacker to access confidential data, compromise its integrity, and cause a denial of service. It was found that AppArmor can be bypassed when
/proc inside the container is symlinked with a specific mount configuration.Recommendations
For versions prior to 1.1.5, upgrade to version 1.1.5 or later to fix the issue.
As a temporary workaround, consider avoiding the use of untrusted container images until the issue is resolved.
Restrict access to the
/proc endpoint inside the container to minimize the risk of exploitation.Exploit
Correção
DoS
Link Following
Improper Preservation of Permissions
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Almalinux
Apparmor
Astra Linux
Centos
Linuxmint
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu
Runc