CVE-2023-30549 Unpatched extfs vulnerabilities are exploitable through suid-mode Apptainer

🗓️ 25 Apr 2023 00:00:00Reported by GitHub_MType

Unpatched extfs use-after-free flaw in Apptainer < 1.1.8 allows privilege escalation on older O

Reporter	Title	Published	Views	Family All 27
AlpineLinux	CVE-2023-30549	25 Apr 202300:00	–	alpinelinux
Circl	CVE-2023-30549	26 Apr 202300:25	–	circl
CNNVD	Apptainer 资源管理错误漏洞	25 Apr 202300:00	–	cnnvd
CVE	CVE-2023-30549	25 Apr 202300:00	–	cve
Debian CVE	CVE-2023-30549	25 Apr 202300:00	–	debiancve
EUVD	EUVD-2023-1328	3 Oct 202520:07	–	euvd
Tenable Nessus	GLSA-202311-13 : Apptainer: Privilege Escalation	25 Nov 202300:00	–	nessus
Tenable Nessus	openSUSE 15 Security Update : apptainer (openSUSE-SU-2024:0244-1)	17 Aug 202400:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2023-30549	9 Aug 202500:00	–	nessus
Github Security Blog	Unpatched extfs vulnerabilities are exploitable through suid-mode Apptainer	25 Apr 202319:48	–	github

[
  {
    "vendor": "apptainer",
    "product": "apptainer",
    "versions": [
      {
        "version": "< 1.1.8",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/torvalds/linux/commit/2220eaf90992c11d888fe771055d4de3303
suse	www.suse.com/security/cve/CVE-2022-1184.html
sylabs	www.sylabs.io/2023/04/response-to-cve-2023-30549/
github	www.github.com/apptainer/apptainer/commit/5a4964f5ba9c8d89a0e353b97f51fd607670a9f7
access	www.access.redhat.com/security/cve/cve-2022-1184
github	www.github.com/apptainer/apptainer/security/advisories/GHSA-j4rf-7357-f4cg
github	www.github.com/apptainer/apptainer/releases/tag/v1.1.8
security-tracker	www.security-tracker.debian.org/tracker/CVE-2022-1184
ubuntu	www.ubuntu.com/security/CVE-2022-1184
security	www.security.gentoo.org/glsa/202311-13

25 Nov 2023 12:06Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.1

EPSS0.00369

CWE-416