runc (SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS package runc, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (4)

• CVE-2022-1996 — CVSS 9.1 (critical): Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0.
• CVE-2023-27561 — CVSS 7.0 (high): runc through 1.1.4 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit…
• CVE-2023-28642 — CVSS 6.1 (medium): runc is a CLI tool for spawning and running containers according to the OCI specification. It was found that AppArmor can be bypassed when…
• CVE-2023-25809 — CVSS 5.0 (medium): runc is a CLI tool for spawning and running containers according to the OCI specification. In affected versions it was found that rootless…