CVE-2023-7258 Denial-of-Service in Gvisor

Medium 4.8 Published 15 May 2024 Updated 2 Aug 2024

An attacker with root permissions can crash the Gvisor sandbox by exploiting a reference counting bug in mount point tracking.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2023-7258?

CVE-2023-7258 is a medium-severity denial of service vulnerability in Google Gvisor, published on 15 May 2024. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.

Official description

A denial of service exists in Gvisor Sandbox where a bug in reference counting code in mount point tracking could lead to a panic, making it possible for an attacker running as root and with permission to mount volumes to kill the sandbox. We recommend upgrading past commit 6a112c60a257dadac59962e0bc9e9b5aee70b5b6

Weakness: CWE-400

Which versions are affected by CVE-2023-7258?

It affects 1 product.

Products include Google Gvisor.

How do I fix CVE-2023-7258?

Upgrade to a fixed version.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2023-7258 being exploited?

There is no known exploitation of CVE-2023-7258 in the wild and no public exploit code.

Sources

Also known as DEBIAN-CVE-2023-7258, GHSA-2h39-83vm-vq42, UBUNTU-CVE-2023-7258.