CVE-2023-28642

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-28642
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-28642.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-28642
Aliases
Downstream
AZL (1)
BELL (1)
CGA (10)
CLEANSTART (2)
CLSA (1)
DEBIAN (1)
MGASA (1)
OESA (4)
openSUSE (2)
RHSA (4)
RLSA (2)
SUSE (2)
UBUNTU (1)
Related
ALSA (3)
CGA (1)
openSUSE (2)
SUSE (2)
Published
2023-03-29T18:15:48Z
Modified
2026-08-12T03:51:08Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L CVSS Calculator
Summary
AppArmor bypass with symlinked /proc in runc
Details

runc is a CLI tool for spawning and running containers according to the OCI specification. It was found that AppArmor can be bypassed when /proc inside the container is symlinked with a specific mount configuration. This issue has been fixed in runc version 1.1.5, by prohibiting symlinked /proc. See PR #3785 for details. users are advised to upgrade. Users unable to upgrade should avoid using an untrusted container image.

Database specific 
{
    "cna_assigner":  "GitHub_M",
    "cwe_ids":  [
        "CWE-281"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/28xxx/CVE-2023-28642.json"
}
References

Affected packages

Git / github.com/opencontainers/runc

Affected ranges

Type
GIT
Repo
https://github.com/opencontainers/runc
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
f19387a6bec4944c770f7668ab51c4348d9c2f38
Database specific
Show details 
{
    "cpe":  "cpe:2.3:a:linuxfoundation:runc:*:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "fixed":  "1.1.5"
        }
    ],
    "source":  [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ]
}

Affected versions

v0.*
v0.0.1
v0.0.2
v0.0.3
v0.0.4
v0.0.5
v0.0.6
v0.0.7
v0.0.8
v1.*
v1.0.0-rc2
v1.1.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-28642.json"