CVE-2023-28642

Name of the Vulnerable Software and Affected Versions runc versions prior to 1.1.5

Description The issue is related to the incorrect handling of symbolic links before accessing a file, which allows an attacker to access confidential data, compromise its integrity, and cause a denial of service. It was found that AppArmor can be bypassed when /proc inside the container is symlinked with a specific mount configuration.

Recommendations For versions prior to 1.1.5, upgrade to version 1.1.5 or later to fix the issue. As a temporary workaround, consider avoiding the use of untrusted container images until the issue is resolved. Restrict access to the /proc endpoint inside the container to minimize the risk of exploitation.