CVE-2023-30549

🗓️ 25 Apr 2023 21:15:10Reported by [email protected]Type

Apptainer open source container platform for Linux has a use-after-free flaw in versions < 1.1.0 with CVE-2023-30549 affecting older operating systems like Red Hat Enterprise Linux 7, Debian 10 buster, Ubuntu 18.04 and 20.04. Workarounds include disabling mounting of extfs filesystem types and using specific configuration options.

Reporter	Title	Published	Views	Family All 27
AlpineLinux	CVE-2023-30549	25 Apr 202300:00	–	alpinelinux
Circl	CVE-2023-30549	26 Apr 202300:25	–	circl
CNNVD	Apptainer 资源管理错误漏洞	25 Apr 202300:00	–	cnnvd
CVE	CVE-2023-30549	25 Apr 202300:00	–	cve
Cvelist	CVE-2023-30549 Unpatched extfs vulnerabilities are exploitable through suid-mode Apptainer	25 Apr 202300:00	–	cvelist
Debian CVE	CVE-2023-30549	25 Apr 202300:00	–	debiancve
EUVD	EUVD-2023-1328	3 Oct 202520:07	–	euvd
Tenable Nessus	GLSA-202311-13 : Apptainer: Privilege Escalation	25 Nov 202300:00	–	nessus
Tenable Nessus	openSUSE 15 Security Update : apptainer (openSUSE-SU-2024:0244-1)	17 Aug 202400:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2023-30549	9 Aug 202500:00	–	nessus

NVD

Node

lfprojects apptainerRange<1.1.8go

Node

sylabs singularity

Node

redhat enterprise_linuxMatch7.0

Source	Link
sylabs	www.sylabs.io/2023/04/response-to-cve-2023-30549/
github	www.github.com/torvalds/linux/commit/4f04351888a83e595571de672e0a4a8b74f
github	www.github.com/apptainer/apptainer/releases/tag/v1.1.8
suse	www.suse.com/security/cve/CVE-2022-1184.html
github	www.github.com/torvalds/linux/commit/2220eaf90992c11d888fe771055d4de3303
security-tracker	www.security-tracker.debian.org/tracker/CVE-2022-1184
access	www.access.redhat.com/security/cve/cve-2022-1184
github	www.github.com/apptainer/apptainer/commit/5a4964f5ba9c8d89a0e353b97f51fd607670a9f7
ubuntu	www.ubuntu.com/security/CVE-2022-1184
security	www.security.gentoo.org/glsa/202311-13

17 Jun 2026 05:55Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.1 - 7.8

EPSS0.00369

CWE-416