QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2023-7258

Back to search

CVE-2023-7258

Published: May 15, 2024

Modified: Aug 2, 2024

PUBLISHED

CVSS v3.1

4.8

MEDIUM

Description

A denial of service exists in Gvisor Sandbox where a bug in reference counting code in mount point tracking could lead to a panic, making it possible for an attacker running as root and with permission to mount volumes to kill the sandbox. We recommend upgrading past commit 6a112c60a257dadac59962e0bc9e9b5aee70b5b6

VendorProductVersions

Google

Gvisor

affected
0b983ff832b175e406f4f9b1a3868457bb1ceb7b - < 6a112c60a257dadac59962e0bc9e9b5aee70b5b6

Weaknesses (CWE)

CWE-400

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now