CVE-2023-28642 MEDIUM

CVE-2023-28642: AppArmor bypass with symlinked /proc in runc

Vendor Opencontainers
Product runc
Weakness CWE-281
Published March 29, 2023
Last update February 12, 2025
View on NVD All CVEs

CVSS base score

6.1/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

What the vulnerability does

01Description

runc is a CLI tool for spawning and running containers according to the OCI specification. It was found that AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration. This issue has been fixed in runc version 1.1.5, by prohibiting symlinked `/proc`. See PR #3785 for details. users are advised to upgrade. Users unable to upgrade should avoid using an untrusted container image.

Key dates

02Disclosure timeline

March 29, 2023 CVE published
February 12, 2025 Record updated