CVE-2023-38496: Apptainer's ineffective privileges drop when requesting container network
Impact
Fix https://github.com/apptainer/apptainer/pull/1523 included in Apptainer 1.2.0-rc.2 has introduced an ineffective privilege drop when requesting container network setup, therefore subsequent functions are called with root privileges. The attack surface is rather limited for users but an attacker could possibly craft a starter config to delete any directory on the host filesystems. Only affects setuid installations of Apptainer.
Patches
The security fix https://github.com/apptainer/apptainer/pull/1578 has been included in Apptainer 1.2.1
Workarounds
There is no known workaround outside of upgrading to Apptainer 1.2.1
Other sources
Apptainer is an open source container platform. Version 1.2.0-rc.2 introduced an ineffective privilege drop when requesting container network setup, therefore subsequent functions are called with root privileges, the attack surface is rather limited for users but an attacker could possibly craft a starter config to delete any directory on the host filesystems. A security fix has been included in Apptainer 1.2.1. There is no known workaround outside of upgrading to Apptainer 1.2.1.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is CVE-2023-38496?
CVE-2023-38496 is a vulnerability in Apptainer, an open source container platform, that allows subsequent functions to be called with root privileges.
What is the impact of CVE-2023-38496?
The impact of CVE-2023-38496 is that subsequent functions are called with root privileges, potentially exposing the system to unauthorized access or privilege escalation.
Which versions of Apptainer are affected by CVE-2023-38496?
Apptainer versions 1.2.0-rc.2 and 1.2.0 are affected by CVE-2023-38496.
How can I fix CVE-2023-38496?
To fix CVE-2023-38496, update Apptainer to version 1.2.1 or higher.
Where can I find more information about CVE-2023-38496?
You can find more information about CVE-2023-38496 at the following references: [GitHub Advisory](https://github.com/apptainer/apptainer/security/advisories/GHSA-mmx5-32m4-wxvx), [GitHub Pull Request](https://github.com/apptainer/apptainer/pull/1578), [NVD](https://nvd.nist.gov/vuln/detail/CVE-2023-38496).