AZL-25850 CVE-2023-28642 affecting package moby-runc for versions less than 1.1.5-1

🗓️ 29 Mar 2023 19:15:22Reported by GoogleType

osv

osv🔗 osv.dev👁 1 Views

CVE-2023-28642 affects moby-runc below 1.1.5-1; upgrade to 1.1.5 to fix AppArmor bypass.

Reporter	Title	Published	Views	Family All 167
ALT Linux	Security fix for the ALT Linux 10 package runc version 1.1.5-alt1	20 Apr 202300:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	31 May 202317:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by two containerd security vulnerabilities (CVE-2023-28642) (CVE-2023-27561)	12 Jun 202312:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	31 May 202317:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Application Manager 4.5.1 addresses multiple security vulnerabilities	31 May 202322:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from openssl-libs, libssh, libarchive, sqlite and go-toolset	1 Aug 202306:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	18 Aug 202504:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Open Container Initiative runc	28 Jun 202422:49	–	ibm
IBM Security Bulletins	Security Bulletin: Denial of service, SQL injection, and other vulnerabilities might affect IBM Storage Defender – Resiliency Service	24 Feb 202523:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable to several issues due to the go compiler	8 Aug 202414:17	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-28642

21 Apr 2026 04:23Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17.8

EPSS0.00012

moby runc apparmor bypass proc symlink upgrade recommended untrusted image