CVE-2025-65105

Katalog CVE

CVSS 5.3 · Medium EPSS 0,23%

Kerentanan UNIX Symbolic Link (Symlink) Following pada lfprojects apptainer. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

Apptainer is an open source container platform. In Apptainer versions less than 1.4.5, a container can disable two of the forms of the little used --security option, in particular the forms --security=apparmor:<profile> and --security=selinux:<label> which otherwise put restrictions on operations that containers can do. The --security option has always been mentioned in Apptainer documentation as being a feature for the root user, although these forms do also work for unprivileged users on systems where the corresponding feature is enabled. Apparmor is enabled by default on Debian-based distributions and SElinux is enabled by default on RHEL-based distributions, but on SUSE it depends on the distribution version. This vulnerability is fixed in 1.4.5.

Rincian

Terbit di NVD

2 Desember 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-61: UNIX Symbolic Link (Symlink) Following
CWE-706: Use of Incorrectly-Resolved Name or Reference

EPSS (30 hari)

0,23% peluang dieksploitasi; lebih tinggi dari 13,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/apptainer/apptainer/security/advisories/GHSA-j3rw-fx6g-q46j patch · advisory vendor
• https://github.com/apptainer/apptainer/commit/4313b42717e18a4add7dd7503528bc15af905981 patch
• https://github.com/apptainer/apptainer/commit/82f17900a0c31bc769bf9b4612d271c7068d8bf2 patch
• https://github.com/apptainer/apptainer/pull/3226 issue tracking
• https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm not applicable
• https://github.com/sylabs/singularity/security/advisories/GHSA-wwrx-w7c9-rf87 not applicable