CVE-2023-28642

runc is a CLI tool for spawning and running containers according to the OCI specification. It was found that AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration. This issue has been fixed in runc version 1.1.5, by prohibiting symlinked `/proc`. See PR #3785 for details. users are advised to upgrade. Users unable to upgrade should avoid using an untrusted container image.

• CWE-281
• CWE-59

• https://github.com/opencontainers/runc/pull/3785Patch
• https://github.com/opencontainers/runc/security/advisories/GHSA-g2j6-57v7-gm8cPatch, Vendor Advisory
• https://github.com/opencontainers/runc/pull/3785Patch
• https://github.com/opencontainers/runc/security/advisories/GHSA-g2j6-57v7-gm8cPatch, Vendor Advisory
• https://security.netapp.com/advisory/ntap-20241206-0005/

Published

Mar 29, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-28636GLPI is a free asset and IT management software package. Sta…4.8
• CVE-2023-28637DataEase is an open source data visualization analysis tool.…8.8
• CVE-2023-28638Snappier is a high performance C# implementation of the Snap…5.9
• CVE-2023-28639GLPI is a free asset and IT management software package. Sta…6.1
• CVE-2023-2864A vulnerability was found in SourceCodester Online Jewelry S…6.1
• CVE-2023-28640Apiman is a flexible and open source API Management platform…3.1
• CVE-2023-28643Nextcloud server is an open source home cloud implementation…8.8
• CVE-2023-28644Nextcloud server is an open source home cloud implementation…7.5
• CVE-2023-28645Nextcloud richdocuments is a Nextcloud app integrating the o…6.5
• CVE-2023-28646Nextcloud android is an android app for interfacing with the…2.4
• CVE-2023-28647Nextcloud iOS is an ios application used to interface with t…6.8
• CVE-2023-28648Osprey Pump Controller version 1.01 inputs passed to a GET p…6.1