CVE-2025-65105

{"id": "CVE-2025-65105", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-65105", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-02T18:43:58.398576Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 3.4, "exploitabilityScore": 1.0}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "apptainer", "product": "apptainer", "versions": [{"status": "affected", "version": "< 1.4.5"}]}]}], "published": "2025-12-02T18:15:48.947", "references": [{"url": "https://github.com/apptainer/apptainer/commit/4313b42717e18a4add7dd7503528bc15af905981", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/apptainer/apptainer/commit/82f17900a0c31bc769bf9b4612d271c7068d8bf2", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/apptainer/apptainer/pull/3226", "tags": ["Issue Tracking"], "source": "security-advisories@github.com"}, {"url": "https://github.com/apptainer/apptainer/security/advisories/GHSA-j3rw-fx6g-q46j", "tags": ["Patch", "Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm", "tags": ["Not Applicable"], "source": "security-advisories@github.com"}, {"url": "https://github.com/sylabs/singularity/security/advisories/GHSA-wwrx-w7c9-rf87", "tags": ["Not Applicable"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-61"}, {"lang": "en", "value": "CWE-706"}]}], "descriptions": [{"lang": "en", "value": "Apptainer is an open source container platform. In Apptainer versions less than 1.4.5, a container can disable two of the forms of the little used --security option, in particular the forms --security=apparmor:<profile> and --security=selinux:<label> which otherwise put restrictions on operations that containers can do. The --security option has always been mentioned in Apptainer documentation as being a feature for the root user, although these forms do also work for unprivileged users on systems where the corresponding feature is enabled. Apparmor is enabled by default on Debian-based distributions and SElinux is enabled by default on RHEL-based distributions, but on SUSE it depends on the distribution version. This vulnerability is fixed in 1.4.5."}, {"lang": "es", "value": "Apptainer es una plataforma de contenedores de c\u00f3digo abierto. En versiones de Apptainer anteriores a la 1.4.5, un contenedor puede deshabilitar dos de las formas de la poco utilizada opci\u00f3n '--security', en particular las formas '--security=apparmor:<profile>' y '--security=selinux:<label>', las cuales de otro modo imponen restricciones a las operaciones que los contenedores pueden realizar. La opci\u00f3n '--security' siempre ha sido mencionada en la documentaci\u00f3n de Apptainer como una caracter\u00edstica para el usuario root, aunque estas formas tambi\u00e9n funcionan para usuarios sin privilegios en sistemas donde la caracter\u00edstica correspondiente est\u00e1 habilitada. Apparmor est\u00e1 habilitado por defecto en distribuciones basadas en Debian y SElinux est\u00e1 habilitado por defecto en distribuciones basadas en RHEL, pero en SUSE depende de la versi\u00f3n de la distribuci\u00f3n. Esta vulnerabilidad est\u00e1 corregida en la versi\u00f3n 1.4.5."}], "lastModified": "2026-10-18T18:10:00.100", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:lfprojects:apptainer:*:*:*:*:*:go:*:*", "vulnerable": true, "matchCriteriaId": "3ABF5585-9632-4E5F-AD97-8C1777DA3F55", "versionEndExcluding": "1.4.5"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}