Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Apptainer ineffective application of selinux and apparmor --security options
Vulnerability Description
Apptainer is an open source container platform. In Apptainer versions less than 1.4.5, a container can disable two of the forms of the little used --security option, in particular the forms --security=apparmor:<profile> and --security=selinux:<label> which otherwise put restrictions on operations that containers can do. The --security option has always been mentioned in Apptainer documentation as being a feature for the root user, although these forms do also work for unprivileged users on systems where the corresponding feature is enabled. Apparmor is enabled by default on Debian-based distributions and SElinux is enabled by default on RHEL-based distributions, but on SUSE it depends on the distribution version. This vulnerability is fixed in 1.4.5.
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
Vulnerability Type
CWE-61
Vulnerability Title
Apptainer 安全漏洞
Vulnerability Description
Apptainer是Apptainer开源的一个Linux开源容器平台。 Apptainer 1.4.5之前版本存在安全漏洞，该漏洞源于容器可能禁用--security选项，可能导致安全限制失效。
CVSS Information
N/A
Vulnerability Type
N/A