PT-2023-22775 · Red Hat+1 · Red Hat+1

Syzbot · Published 2023-04-25 · Updated 2024-08-20 · CVE-2023-30549

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apptainer versions prior to 1.1.0 Apptainer versions 1.1.0 through 1.1.7 with apptainer-suid versions prior to 1.1.8

Description Apptainer is an open source container platform for Linux that contains an ext4 use-after-free flaw. This flaw can be exploited for denial of service and potentially for privilege escalation. The issue affects older operating systems where the relevant patch has not been applied, including Red Hat Enterprise Linux 7, Debian 10 buster (unless the linux-5.10 package is installed), Ubuntu 18.04 bionic, and Ubuntu 20.04 focal. Apptainer 1.1.8 includes a patch that disables mounting of extfs filesystem types in setuid-root mode by default.

Recommendations For Apptainer versions prior to 1.1.0, update to version 1.1.0 or later. For Apptainer versions 1.1.0 through 1.1.7 with apptainer-suid, update apptainer-suid to version 1.1.8 or later. As a temporary workaround, consider setting allow setuid = no in apptainer.conf, which requires having unprivileged user namespaces enabled. Alternatively, use the limit containers options in apptainer.conf/singularity.conf to limit sif files to trusted users, groups, and/or paths, and set allow container extfs = no to disallow mounting of extfs overlay files.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2023-30549

GHSA-J4RF-7357-F4CG

GO-2023-1738

OPENSUSE-SU-2024:0244-1

OPENSUSE-SU-2024:12894-1

Affected Products

Red Hat

Ubuntu

References · 34

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/30xxx/CVE-2023-30549.json · Exploit
• https://github.com/apptainer/apptainer/security/advisories/GHSA-j4rf-7357-f4cg · Vendor Advisory
• https://github.com/apptainer/apptainer/commit/5a4964f5ba9c8d89a0e353b97f51fd607670a9f7 · Patch
• https://ubuntu.com/security/CVE-2023-30549 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-j4rf-7357-f4cg · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-30549 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-1184 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:0244-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12894-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-30549 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-1184 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-30549 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-30549 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2023-1738 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1184 · Vendor Advisory