Red Hat Security Advisory: runc security update

Fixed packages 3

Vulnerabilities 5

• High 7.0
  CVE-2023-27561

  Opencontainers runc Incorrect Authorization vulnerability

  runc through 1.1.4 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit this, an attacker must be able to spawn two containers with custom volume-mount configurations, and be able to run custom …

  ctop podman podman-doc github.com/opencontainers/runc Debian Ubuntu Azure Linux Alpine Wolfi Go
  Mar 3, 2023
• Medium 6.1
  CVE-2023-28642

  AppArmor bypass with symlinked /proc in runc

  runc is a CLI tool for spawning and running containers according to the OCI specification. It was found that AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration. This issue has been fixed in runc version…

  opencontainers runc ctop podman Debian Ubuntu Azure Linux Alpine Wolfi Go
  Mar 29, 2023
• Medium 6.0
  CVE-2021-43784

  Overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration

  runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc, netlink is used internally as a serialization system for specifying the relevant container configuration to the `C` portion of the code (responsible f…

  opencontainers runc runc github.com/opencontainers/runc Debian Ubuntu Azure Linux Alpine Go
  Dec 6, 2021
• Medium 5.0
  CVE-2023-25809

  rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc

  runc is a CLI tool for spawning and running containers according to the OCI specification. In affected versions it was found that rootless runc makes `/sys/fs/cgroup` writable in following conditons: 1. when runc is executed inside the user namespace, and the…

  opencontainers runc ctop podman Debian Ubuntu Azure Linux Alpine Wolfi Go
  Mar 29, 2023
• Unscored —
  CVE-2022-41724

  Panic on large handshake records in crypto/tls

  Large handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when attempting to construct responses. This affects all TLS 1.3 clients, TLS 1.2 cli…

  Go standard library crypto/tls katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go
  Feb 28, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.3_release_notes/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2029439
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2175721
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2178492
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2182883
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2182884
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6380.json
• report
  https://access.redhat.com/security/cve/CVE-2021-43784
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-43784
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-43784
• article
  https://github.com/opencontainers/runc/security/advisories/GHSA-v95c-p5hm-xq8f
• report
  https://access.redhat.com/security/cve/CVE-2022-41724
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-41724
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-41724
• article
  https://go.dev/cl/468125
• article
  https://go.dev/issue/58001
• article
  https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E
• advisory
  https://pkg.go.dev/vuln/GO-2023-1570
• report
  https://access.redhat.com/security/cve/CVE-2023-25809
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-25809
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-25809
• article
  https://github.com/opencontainers/runc/commit/0d62b950e60f6980b54fe3bafd9a9c608dc1df17
• article
  https://github.com/opencontainers/runc/security/advisories/GHSA-m8cg-xc2p-r3fc
• report
  https://access.redhat.com/security/cve/CVE-2023-27561
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-27561
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-27561
• article
  https://gist.github.com/LiveOverflow/c937820b688922eb127fb760ce06dab9
• article
  https://github.com/opencontainers/runc/issues/2197#issuecomment-1437617334
• article
  https://github.com/opencontainers/runc/issues/3751
• report
  https://access.redhat.com/security/cve/CVE-2023-28642
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-28642
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-28642
• advisory
  https://github.com/advisories/GHSA-g2j6-57v7-gm8c