4 matches found
Use Of Incorrectly-Resolved Name Or Reference
github.com/apptainer/apptainer is vulnerable to Use of Incorrectly-Resolved Name or Reference. The vulnerability is due to improper enforcement of the --security option, which allows an attacker to disable AppArmor or SELinux restrictions and bypass container security controls...
Fedora 41 : apptainer (2025-5b1e8725d7)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-5b1e8725d7 advisory. Update to upstream 1.4.2, fix CVE-2025-22870 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Ness...
PT-2023-22775 · Red Hat +1 · Red Hat +1
Name of the Vulnerable Software and Affected Versions: Apptainer versions prior to 1.1.0 Apptainer versions 1.1.0 through 1.1.7 with apptainer-suid versions prior to 1.1.8 Description: Apptainer is an open source container platform for Linux that contains an ext4 use-after-free flaw. This flaw ca...
CVE-2023-30549 Unpatched extfs vulnerabilities are exploitable through suid-mode Apptainer
Apptainer is an open source container platform for Linux. There is an ext4 use-after-free flaw that is exploitable through versions of Apptainer 1.1.0 and installations that include apptainer-suid 1.1.8 on older operating systems where that CVE has not been patched. That includes Red Hat Enterpri...