CVE-2023-38496

Description

Ineffective privileges drop when requesting container network in github.com/apptainer/apptainer

Affected packages (2)

• Go/github.com/apptainer/apptainer>= 1.2.0, < 1.2.1
• Go/github.com/apptainer/apptainer>= 1.2.0, < 1.2.1

CVSS scores

References (5)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2023-38496
• PATCHhttps://github.com/apptainer/apptainer
• WEBhttps://github.com/apptainer/apptainer/pull/1523
• WEBhttps://github.com/apptainer/apptainer/pull/1578
• WEBhttps://github.com/apptainer/apptainer/security/advisories/GHSA-mmx5-32m4-wxvx