CVE-2023-0229 github.com/openshift/apiserver-library-go Improper Input Validation vulnerability
Low-privileged users can bypass seccomp restrictions by setting pod profiles to unconfined, weakening container isolation in OpenShift clusters.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-0229?
CVE-2023-0229 is a medium-severity vulnerability in Redhat Openshift, published on 25 Jan 2023. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A flaw was found in github.com/openshift/apiserver-library-go, used in OpenShift 4.12 and 4.11, that contains an issue that can allow low-privileged users to set the seccomp profile for pods they control to "unconfined." By default, the seccomp profile used in the restricted-v2 Security Context Constraint (SCC) is "runtime/default," allowing users to disable seccomp for pods they can create and modify.
Weakness: CWE-20
Which versions are affected by CVE-2023-0229?
3 open source packages ship an affected version, including github.com/openshift/apiserver-library-go. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
github.com/openshift/apiserver-library-go Go | All versions | 0.0.0-20230119093715-30f75d79e424 |
github.com/openshift/apiserver-library-go Go | All versions | 0.0.0-20230120221150-cefee9e0162b |
github.com/openshift/apiserver-library-go Go | All versions | 0.0.0-20230120221150-cefee9e0162b |
Linux distribution packages (4)
microshift Red Hat:openshift:4.12::el8 | All versions | 0:4.12.6-202303012057.p0.g50997a2.assembly.4.12.6.el8 |
microshift-networking Red Hat:openshift:4.12::el8 | All versions | 0:4.12.6-202303012057.p0.g50997a2.assembly.4.12.6.el8 |
microshift-release-info Red Hat:openshift:4.12::el8 | All versions | 0:4.12.6-202303012057.p0.g50997a2.assembly.4.12.6.el8 |
microshift-selinux Red Hat:openshift:4.12::el8 | All versions | 0:4.12.6-202303012057.p0.g50997a2.assembly.4.12.6.el8 |
Products include Redhat Openshift.
How do I fix CVE-2023-0229?
Upgrade github.com/openshift/apiserver-library-go to a fixed version for your release line: 0.0.0-20230119093715-30f75d79e424 or 0.0.0-20230120221150-cefee9e0162b.
Is CVE-2023-0229 being exploited?
There is no known exploitation of CVE-2023-0229 in the wild and no public exploit code.
Other vulnerabilities in Redhat Openshift
Sources
Also known as GHSA-5465-xc2j-6p84, GO-2023-1549, RHBA-2023:1037.