CVE-2023-30549

🗓️ 25 Apr 2023 21:15:10Reported by [email protected]Type

Apptainer open source container platform for Linux has a use-after-free flaw in versions < 1.1.0 with CVE-2023-30549 affecting older operating systems like Red Hat Enterprise Linux 7, Debian 10 buster, Ubuntu 18.04 and 20.04. Workarounds include disabling mounting of extfs filesystem types and using specific configuration options.

Reporter	Title	Published	Views	Family All 28
AlpineLinux	CVE-2023-30549	25 Apr 202300:00	–	alpinelinux
Circl	CVE-2023-30549	26 Apr 202300:25	–	circl
CNNVD	Apptainer 资源管理错误漏洞	25 Apr 202300:00	–	cnnvd
CVE	CVE-2023-30549	25 Apr 202300:00	–	cve
Cvelist	CVE-2023-30549 Unpatched extfs vulnerabilities are exploitable through suid-mode Apptainer	25 Apr 202300:00	–	cvelist
Debian CVE	CVE-2023-30549	25 Apr 202300:00	–	debiancve
EUVD	EUVD-2023-1328	3 Oct 202520:07	–	euvd
Tenable Nessus	GLSA-202311-13 : Apptainer: Privilege Escalation	25 Nov 202300:00	–	nessus
Tenable Nessus	openSUSE 15 Security Update : apptainer (openSUSE-SU-2024:0244-1)	17 Aug 202400:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2023-30549	9 Aug 202500:00	–	nessus

NVD

Node

lfprojects apptainerRange<1.1.8go

Node

sylabs singularity

Node

redhat enterprise_linuxMatch7.0

Source	Link
lwn	www.lwn.net/Articles/932137/
suse	www.suse.com/security/cve/CVE-2022-1184.html
security	www.security.gentoo.org/glsa/202311-13
github	www.github.com/apptainer/apptainer/releases/tag/v1.1.8
access	www.access.redhat.com/security/cve/cve-2022-1184
ubuntu	www.ubuntu.com/security/CVE-2022-1184
lwn	www.lwn.net/Articles/932136/
github	www.github.com/apptainer/apptainer/commit/5a4964f5ba9c8d89a0e353b97f51fd607670a9f7
sylabs	www.sylabs.io/2023/04/response-to-cve-2023-30549/
github	www.github.com/torvalds/linux/commit/4f04351888a83e595571de672e0a4a8b74f

17 Jun 2026 05:55Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.1 - 7.8

EPSS0.00369

SSVC

CWE-416