CVE:CVE-2023-30549
CNNVD:CNNVD-202304-2050
Apptainer是Apptainer开源的一个Linux开源容器平台。
Apptainer 1.1.8之前版本存在资源管理错误漏洞，该漏洞源于存在内存释放后重用问题。攻击者利用该漏洞导致系统拒绝服务和潜在的权限提升。
solution:Upgrade lfprojects apptainer to a higher version than 1.1.8,and avoid the version (,1.1.8); Upgrade sylabs singularity to a higher version than *; Upgrade redhat enterprise_linux to a higher version than 7.0,and avoid the version 7.0