Lucene search
GoogleOSV:CVE-2023-28642HistoryMar 29, 2023 - 7:15 p.m.
CVE-2023-28642
2023-03-2919:15:22
Google
osv.dev
3
runc is a CLI tool for spawning and running containers according to the OCI specification. It was found that AppArmor can be bypassed when /proc inside the container is symlinked with a specific mount configuration. This issue has been fixed in runc version 1.1.5, by prohibiting symlinked /proc. See PR #3785 for details. users are advised to upgrade. Users unable to upgrade should avoid using an untrusted container image.
Related
alpinelinux
alpinelinux
CVE-2023-28642
2023-03-29 19:15:22
ubuntucve
ubuntucve
CVE-2023-28642
2023-03-29 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-28642 affecting package moby-runc 1.1.2+azure-4
2023-04-20 19:17:28
CVE-2023-28642 affecting package moby-runc for versions less than 1.1.5-1
2023-05-03 16:08:49
cgr
cgr
CVE-2023-28642 vulnerabilities
2024-05-19 03:07:16
cve
cve
CVE-2023-28642
2023-03-29 19:15:22
veracode
veracode
Symlink Bypass
2023-04-05 13:38:40
cvelist
cvelist
CVE-2023-28642 AppArmor bypass with symlinked /proc in runc
2023-03-29 18:15:48
redhatcve
redhatcve
CVE-2023-28642
2023-03-30 09:22:48
debiancve
debiancve
CVE-2023-28642
2023-03-29 19:15:22
wolfi
wolfi
CVE-2023-28642 vulnerabilities
2024-05-19 16:00:45
prion
prion
Design/Logic Flaw
2023-03-29 19:15:00
ibm
ibm
Security Bulletin: IBM Cloud Kubernetes Service is affected by two containerd security vulnerabilities (CVE-2023-28642) (CVE-2023-27561)
2023-06-12 12:41:31
Security Bulletin: IBM Edge Application Manager 4.5.1 addresses multiple security vulnerabilities
2023-05-31 22:20:05
Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs
2023-05-31 17:22:48
openvas
openvas
Huawei EulerOS: Security Advisory for docker-runc (EulerOS-SA-2023-2611)
2023-08-08 00:00:00
Huawei EulerOS: Security Advisory for docker-runc (EulerOS-SA-2023-2581)
2023-08-08 00:00:00
Huawei EulerOS: Security Advisory for docker-runc (EulerOS-SA-2023-2638)
2023-09-05 00:00:00
osv
osv
runc AppArmor bypass with symlinked /proc
2023-03-30 20:20:23
runc vulnerabilities
2023-05-18 10:03:59
Moderate: runc security update
2023-11-07 00:00:00
github
github
runc AppArmor bypass with symlinked /proc
2023-03-30 20:20:23
redos
redos
ROS-20231031-01
2023-10-31 00:00:00
nessus
nessus
EulerOS 2.0 SP9 : docker-runc (EulerOS-SA-2023-2581)
2023-08-08 00:00:00
RHEL 8 : container-tools:3.0 (RHSA-2024:0564)
2024-01-30 00:00:00
EulerOS 2.0 SP9 : docker-runc (EulerOS-SA-2023-2611)
2023-08-08 00:00:00
redhat
redhat
(RHSA-2024:0564) Moderate: container-tools:3.0 security update
2024-01-30 12:10:11
(RHSA-2023:6380) Moderate: runc security update
2023-11-07 06:03:35
(RHSA-2023:6938) Moderate: container-tools:4.0 security and bug fix update
2023-11-14 08:40:57
oraclelinux
oraclelinux
buildah security update
2023-07-19 00:00:00
aardvark-dns security update
2023-07-19 00:00:00
runc security update
2023-11-11 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package runc version 1.1.5-alt1
2023-04-20 00:00:00
ubuntu
ubuntu
runC vulnerabilities
2023-05-18 00:00:00
runC vulnerabilities
2023-05-23 00:00:00
mageia
mageia
Updated opencontainers-runc packages fix security vulnerability
2023-04-07 00:20:12
rosalinux
rosalinux
Advisory ROSA-SA-2023-2209
2023-08-08 07:51:13
almalinux
almalinux
Moderate: runc security update
2023-11-07 00:00:00
Moderate: container-tools:4.0 security and bug fix update
2023-11-14 00:00:00
Moderate: container-tools:rhel8 security and bug fix update
2023-11-14 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-5.0-0038
2023-06-27 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0433
2023-07-21 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0391
2023-05-12 00:00:00
hp
hp
HP ThinPro 8.0 SP 7 Security Updates
2024-01-26 00:00:00