CVE-2023-38496
2 advisories.
Go/github.com/apptainer/apptainer CVE-2023-38496: medium 6.1, EPSS 0.26%
Ineffective privileges drop when requesting container network
Action: Upgrade github.com/apptainer/apptainer to 1.2.1 or later.
go get github.com/apptainer/apptainer@v1.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.2.0 | 1.2.1 | - |
Fixed versions
| 1.2.1 |
Sources
- osv: GHSA-mmx5-32m4-wxvx
- https://github.com/apptainer/apptainer/security/advisories/GHSA-mmx5-32m4-wxvx
- https://nvd.nist.gov/vuln/detail/CVE-2023-38496
- https://github.com/apptainer/apptainer/pull/1523
- https://github.com/apptainer/apptainer/pull/1578
- https://github.com/apptainer/apptainer
CVE-2023-38496 · published · modified · JSON
Go/github.com/apptainer/apptainer CVE-2023-38496: unknown, EPSS 0.26%
Ineffective privileges drop when requesting container network in github.com/apptainer/apptainer
Action: Upgrade github.com/apptainer/apptainer to 1.2.1 or later.
go get github.com/apptainer/apptainer@v1.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.2.0 | 1.2.1 | - |
Fixed versions
| 1.2.1 |
Sources
- osv: GO-2023-1965
- https://github.com/apptainer/apptainer/security/advisories/GHSA-mmx5-32m4-wxvx
- https://nvd.nist.gov/vuln/detail/CVE-2023-38496
- https://github.com/apptainer/apptainer/pull/1523
- https://github.com/apptainer/apptainer/pull/1578
CVE-2023-38496 · published · modified · JSON