Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-7258

Опубликовано: 15 мая 2024
Источник: nvd
CVSS3: 4.8
CVSS3: 6.5
EPSS Низкий

Описание

A denial of service exists in Gvisor Sandbox where a bug in reference counting code in mount point tracking could lead to a panic, making it possible for an attacker running as root and with permission to mount volumes to kill the sandbox. We recommend upgrading past commit 6a112c60a257dadac59962e0bc9e9b5aee70b5b6

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:google:gvisor:*:*:*:*:*:*:*:*
Версия до 20231204.0 (исключая)

EPSS

Процентиль: 32%
0.00124
Низкий

4.8 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-400

Связанные уязвимости

CVSS3: 4.8
ubuntu
больше 1 года назад

A denial of service exists in Gvisor Sandbox where a bug in reference counting code in mount point tracking could lead to a panic, making it possible for an attacker running as root and with permission to mount volumes to kill the sandbox. We recommend upgrading past commit 6a112c60a257dadac59962e0bc9e9b5aee70b5b6

CVSS3: 4.8
debian
больше 1 года назад

A denial of service exists in Gvisor Sandbox where a bug in reference ...

CVSS3: 4.8
github
больше 1 года назад

A denial of service exists in Gvisor Sandbox where a bug in reference counting code in mount point tracking could lead to a panic, making it possible for an attacker running as root and with permission to mount volumes to kill the sandbox. We recommend upgrading past commit 6a112c60a257dadac59962e0bc9e9b5aee70b5b6

EPSS

Процентиль: 32%
0.00124
Низкий

4.8 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-400